Update Devise to protect against newly discovered CSRF token attacks