Update devise.

Since we're using PostgreSQL, we're not affected by the recent
security issue, but let's stay up to date anyway.