greg-barnett/devise_security_extension — comment on commit 8c05b3d807f8c7f34978d760aca6f7ea9c848da1
File:  line 0
By traxanos:

why you create an inital old password entry? it should store only old passwords. not the current. to check against current, the secure validation have an current_equal_password_validation method.