add password_validation submodule
move valid_password? to core model
remove useless failing spec
fixes #582
remove password_validation shared_examples
Add docs badge to README

[ci skip]
add index on unlock_token
move remember_me_httponly outside user block
add index on [:provider, :uid] for authentications
move remember_me_httponly to a better location