upgraded devise because security hole in v >2.1.3
repo should not track gemfile.lock
repo should not track gemfile.lock
removed Gemfile.lock from tracking