update tests so they work with Devise 3.2

Resolves #2671

Devise 3.1 introduced `allow_insecure_token_lookup`, but 3.2 took it
away :/

Oh well, at least the tests are passing now.

Conflicts:
	features/support/paths.rb
Fix nested resource name in breadcrumbs

Fixes #2132.

Conflicts:
	spec/unit/view_helpers/breadcrumbs_spec.rb
Exclude Devise versions vulnerable to CVE-2013-0233

Fixes #2744, closes #2745
hide blank slate link if the user doesn't have 'create' permissions

fixes #2588
brings back the resource mismatch error

resolves #2728

Conflicts:
	spec/unit/resource_collection_spec.rb
Added Greek translation (el.yml)
Improve 'ja' translations

Conflicts:
	config/locales/ja.yml
translate "index_list:"
Add new devise translations to fr.yml

Conflicts:
	config/locales/fr.yml
disallow Kaminari 0.15.0

this prevents users from running into #2537
keep filter conditions from being deleted

This a backport of 4dd5b105 from master to 0-6-stable

Ref: #2523, #2832
#2537: autoload the comments model

By not loading the Comments model until Rails is initialized, we can
rely on the user's changes to Kaminari settings.

This is a backport of 3d23682c from master to 0-6-stable
fix regression in fa0edec4

Ref: #2523, #2832
Revert "make CSV downloads respect pagination"

This reverts commit a8ad4f989caec3a9ffbc820a949f309d2ce1a832.

Ref: #2847
bump to 0.6.3
Restore compatibility with Formtastic 2.0
#736: Breadcrumbs: don't link if show action is disabled

This resolves #736 by simply displaying the result of `display_name` if
the show action is disabled, instead of attempting to link to the
resource in question.

This is a backport of ae862fda from master to 0-6-stable