Use mapping.fullpath in omniauth callbacks
passes headers through test helpers' response
Merge pull request #2717 from memberful/2716-splat-sanitize-params

Splat the arguments to strong_parameters#permit, fixes #2716
Add Rails 4 related todo
Separate redirects and flash messages in navigational_formats and flashing_formats
Don't use config option for flashing_formats
Merge pull request #2562 from devolute/master

passes headers through test helpers' response
Merge pull request #2718 from ssendev/flashing_formats

Separate redirects and flash messages in navigational_formats and flashing_formats
A GET to sign in shouldn't extend the session.
Merge pull request #2227 from AlexanderZaytsev/master

Use mapping.fullpath in omniauth callbacks
Update CHANGELOG
Split out sign_in/out functionality so it can be reused in hooks
Ensure timeoutable hook respects `Devise.sign_out_all_scopes` configuration

Closes #2606
Release Devise 3.2.0
Update Rails 3.2 lock too
Improve error message for wrongly nested omniauth callback
Bring `password_digest` back.

This method is part of the protected API and is used by custom
encryption engines (like `devise-encryptable`) to hook the custom
encryption logic in the models.

Fixes #2730
Merge pull request #2731 from plataformatec/lm-password-digest

Bring `password_digest` back.
Adds yield around resource on devise controllers

If you want to add a new behavior to your devise
controllers but you don't want to override devise's
default workflow, just pass a block around resource.

This would give you for example, the ability to
trigger background jobs after user signs in.
Add store_location_for helper

This is used as a complement to `stored_location_for`.

Example:

Before authorizing with Omniauth;

  store_location_for(:user, dashboard_path)
  redirect_to user_omniauth_authorize_path(:facebook)

In our Omniauth callback

  sign_in(user)
  redirect_to stored_location_for(:user) || root_path