devise 3.5.2

enhancements
- Perform case insensitive basic authorization matching
bug fixes
- Do not use digests for password confirmation token
- Fix infinite redirect in Rails 4.2 authenticated routes
- Autoload Devise::Encryptor to avoid errors on thread-safe mode
deprecations
- config.expire_auth_token_on_timeout was removed