Fix access_locked? always return boolean
Adding publicly available methods on Recoverable and Confirmable to retrieve tokens
changing name from *_token! to get_or_create_*_token
Renaming get_or_create_*_token to ensure_*_token to match API in token authenticatable
Merge pull request #2464 from sslotnick/expose_reset_confirm_tokens

Expose reset password and confirmation tokens
Merge pull request #2458 from t-kot/fix_access_locked_return_value

Fix access_locked? always return boolean
Rename ParamFilter to ParameterFilter for consistency
Splat args to be sanitized
Update code example for #update_without_password
Merge pull request #2479 from djmaze/patch-1

Update code example for #update_without_password
Updated section 'Configuring controllers'

I added an extra note in the section on creating a custom (namespaced) controller. 

This controller needs to be created in a directory in order for it to work. Otherwise (for example when creating the controller in `app/controllers`) a `uninitialized constant Admins` error is thrown.

Also, fixed the Markdown formatting for the numbered lists in the README.
Merge pull request #2480 from robinroestenburg/patch-1

Updated section 'Configuring controllers'
Add failing test case for bad parameter sanitizing when failing to login
Fix improper login param sanitization permit