Merge pull request #2687 from Lightpower/master

Warning of the last attempt password entering
Merge pull request #2689 from Lightpower/master

* typo
Update CHANGELOG [ci skip]
Prevent mutation of orig values during case and wspace sanitizations
Update code comment to keep it up to date

[#2691]
[ci skip]
Add entry to changelog

[#2691]
[ci skip]

Signed-off-by: José Valim <jose.valim@plataformatec.com.br>

Conflicts:
	CHANGELOG.md
Improve devise_for docs to be make routes integration more explicit
* show message for last attempt, not for one-before-last one; 
* update test to check the message :invalid, :last_attempt, :locked
Merge pull request #3 from Lightpower/feature/last_attempt_message

Feature/last attempt message