Return the signed in user from sign_in_as in specs
Use double quotes for HTML attributes

Our style guide says to prefer double quotes for HTML and ERb
attributes. Apply this consistently throughout this repo.
Make travis build the 2.0 branch

This branch will be the target of pull requests, so I'd like to have CI
running on it as well.
Remove unnecessary autoload call from PasswordStrategies module.
Remove Gemnasium Badge

I'm not sure what 'Dependencies Inactive' was supposed to  be telling me
or how to fix it.
Add a notice about overriding controllers
Replace sign out links with sign out buttons.

Using `button_to` instead of `link_to` for DELETE requests removes an
unnecessary dependency on JavaScript.
Use original_fullpath when redirecting

original_fullpath works better than fullpath here, because fullpath doesn't play nice with mounted engines.

For example, with rails_admin, request.fullpath is "/admin/" but request.original_fullpath is "/admin".
Tell hound we're using single quoted strings.

thoughtbot have updated our style guide to prefer double quoted strings,
but I'd rather maintain single quotes until we're ready to move to
double quotes everywhere.
v1.4.0
Encourage use of a secure session cookie

Turning `secure_cookie` on has the effect of making the cookie
HTTPS-only, and thus not susceptible to session hijacking. For
security, this should be the default in environments other than
development and test.

The default initializer has been updated to reflect this. New
applications that run the generator will have `secure_cookie` enabled
in all but development and test environments.

If `secure_cookie` is accessed having previously been unconfigured, a
warning is raised encouraging the developer to enable `secure_cookie` or
at least explicitly set it to false, thus opting in to the insecure
behavior.

Additionally, a descriptive application error is raised if
`secure_cookie` is enabled and yet `current_user` is accessed in a
non-ssl request. This is an indicator that the developer has forgotten
to enable SSL in this environment. This should help to address the
confusion that might arise from the generated initializer applying a
different configuration between development and production. Without the
application error, the end user would simply have a signed out session.