alphagov/EFG — pull request #53 by jabley (2012-09-24 11:41:39+00:00)
Title: Devise encryptable

See https://www.pivotaltracker.com/story/show/36443651

This changes how we store passwords, dropping the default bcrypt scheme in devise to use instead SHA-512

This needs to be considered in tandem with the change to alphagov/alphagov-deployment#33, so that we are happy both changes will work together correctly.

Once this change has been deployed, the new rake test will need running to reset everyone's password and they will need to use the request password reset functionality to generate a new password that satisfies the approved password hashing policy.