Upgraded to Rails 4.1.6.
Flooding protection on in production.
Email addresses now allowed as usernames.