revert to devise 3.0.x due to confirmable misbehaviour

as documented here: https://github.com/plataformatec/devise/issues/3009

(Basically, let's use the version of devise that works for us.)