Add update_attribute

It is called from devise at least once: on sign in, after one failed
sign in attempt.

Devise version: 3.2.4

Activated devise plugins:

:database_authenticatable, :registerable, :lockable, :recoverable,
:rememberable, :trackable, :validatable