Updated README [ci skip]
Validate host before redirect on login

Janus used to blindly redirect to `params[:return_to]` whenever the
host was the request.host (hence no security issues), but the
developer was missing the possibility to interupt the redirect if
the host isn't accessible for some reason.
Fix Travis build matrix
v0.9.1
Rails 4.2 compatibility
depending on bcrypt gem (not bcrypt-ruby)