gem updates, devise locked to 3.0.x