Lock hydra-head and devise (-> master)

Lock hydra-head to 6.3.x and devise to 3.0.x until we fix compatibility issues and deprecations.