module Devise::Models::Authenticatable

given to :except will simply add names to exempt to Devise internal list.
and passing a new list of attributes you want to exempt. All attributes
are *not* accessible. You can remove this default by using :force_except
By default, it removes from the serializable model all attributes that
Redefine serializable_hash in models for more secure defaults.

def serializable_hash(options = nil)
  options = options.try(:dup) || {}
  options[:except] = Array(options[:except]).dup
  if options[:force_except]
    options[:except].concat Array(options[:force_except])
  else
    options[:except].concat UNSAFE_ATTRIBUTES_FOR_SERIALIZATION
  end
  super(options)
end