Skip storage for cookies on unverified requests
Get rid of deprecated code
Add Devise::KeyGenerator
Use HMAC on tokens stored in the DB