plataformatec/devise — pull request #3125 by gregmolnar (2014-07-22 14:34:14+00:00)
Title: make lockable default

Without the `lockable` module it is possible to do a timing based username enumeration so I propose to make `lockable` opt-out rather than opt-in.