bump devise_zxcvbn gem

This picks up the change which adds parts of the email address to the
weak words list (https://github.com/bitzesty/devise_zxcvbn/pull/3)
test for discouraging reuse of email in password
Merge pull request #173 from alphagov/bump-devise-zxcvbn

bump devise_zxcvbn gem