Use mapping.fullpath in omniauth callbacks
set error to the field specified in unlock_keys config

closes #2418
Fix typo in README.md
Merge pull request #2422 from x3qt/patch-1

Fix typo in README.md [ci skip]
Update doc to mention http_authenticable is false by default
Merge pull request #2424 from emilsoman/doc-fix

Update doc to mention http_authenticable is false by default [ci skip]
redirect user to the referrer if latest request was not GET after timeout

closes #2421
Merge pull request #2427 from plataformatec/issue-2421

redirect user to the referrer if latest request was not GET after timeout
Avoid sending confirmations to blank emails.

At times, validations may be skipped and no email address may be
provided. Such an instance comes when testing uniqueness validations of
specific attributes in a Devise model with confirmable, especially when
using Shoulda matchers.
Merge pull request #2430 from kramerc/blank-email

Avoid sending confirmations to blank emails.
don't update failed_attempts attribute if already equal to 0
record is potentially unchanged here, if so, no needs to save it
Merge pull request #2444 from julp/no_ghost_transactions

Fix empty transactions created by devise
Change flash message to alert instead of error

Devise uses the defaults :notice and :alert everywhere, this one seems to
have been missed since it was introduced in
ff75341c757c76ddcab863cac7ab77254dcd230d.
We are not duck typing here, so don't call the variable duck
Code formatting for class names and command
Merge pull request #2453 from jroes/patch-1

Code formatting for class names and command [ci skip]
Just for Rails 3.2
Fix access_locked? always return boolean
Adding publicly available methods on Recoverable and Confirmable to retrieve tokens