Add OSVDB-114435 (CSRF token fixation attacks in Devise) (closes #43).