Implement the disable authy action

- added the POST_disable_authy action to controller
- Added the {resource}_disable_authy route. Eg: user_disable_authy
- Added tests
Fix issue with devise recoverable module #23

Override the sign_in method in passwords controller, if the user has
enabled 2FA do nothing because we need verify the authy token.
Merge remote-tracking branch 'origin/recoverable'