Pwned gem & simplified dependancies

Thanks to @philnash and @wjordan for contributing this release.

This release migrates common logic to the pwned gem. This should have no impact on the behaviour of the plugin.

Additionally this release moves the explicit dependency on rails to a development dependancy. This will allow a broader ranch of clients to use the plugin, being constrained by devise's rails support rather than the plugins specific dependancy.