bump devise_zxcvbn gem

This picks up the change which adds parts of the email address to the
weak words list (https://github.com/bitzesty/devise_zxcvbn/pull/3)