bump devise_zxcvbn gem

This picks up the change which [adds parts of the email address to the
weak words list](https://github.com/bitzesty/devise_zxcvbn/pull/3).