* Allows CSRF cleanup to be turned off for certain strategy types
* Defaults Authenticatable CSRF cleanup
lock_access! better failure message
lock_access! better failure message
Document that we can configure Devise test helpers in spec_helper.rb

Closes #3006 [ci skip]
Merge pull request #3023 from jphenow/omniauth-cant-cleanup-csrf

Omniauth can't cleanup CSRF
Merge pull request #3029 from randoum/master

lock_access! better failure message