Add failing test case for bad parameter sanitizing when failing to login

[latortuga]

Failing test for #2440. This was hard to track down because the implementation for StrongParameters' action_on_unpermitted_parameters either doesn't work or isn't documented correctly and it doesn't seem to raise an error as expected.

[josevalim]

@latortuga Great work! Can you provide a fix as well @latortuga? We should just add the missing ones to our list. :)

[josevalim]

@latortuga Hey, can you help us tidy this up? Feel free to merge your tests and the proper fix. :) ❤️

[latortuga]

Yes, I'll try to get it today or tomorrow. I've been out of town and work has been pretty busy, sorry for the delay!

[joaodiogocosta]

Guys please help me with this: http://stackoverflow.com/questions/17631659/devise-custom-attributes-and-strong-parameters

[josevalim]

It is pretty hard to help if you don't include at least your Devise and Rails versions. Please take a look at our CONTRIBUTING.md guide for some tips on how to write good reports.

[joaodiogocosta]

I'm sorry, my bad. Here it is: Rails 4 and Devise 3.0.0rc

[josevalim]

Have you tried Devise 3.0.0 final? It was launched this sunday.

[joaodiogocosta]

Nice, didn't know that. I'll try and tell about it later. Thanks