Update to send changed password notification emails

Add the devise initializer config setting to enable the sending of notification
emails when a user changes their password.

CHANGELOG

@@ -73,6 +73,7 @@ v 8.11.0 (unreleased)
   - Add description to new_issue email and new_merge_request_email in text/plain content type. !5663 (dixpac)
   - Speed up and reduce memory usage of Commit#repo_changes, Repository#expire_avatar_cache and IrkerWorker
   - Add unfold links for Side-by-Side view. !5415 (Tim Masliuchenko)
+  - Update devise initializer to turn on changed password notification emails. !5648 (tombell)
 
 v 8.10.5 (unreleased)
 

config/initializers/devise.rb

@@ -100,6 +100,9 @@
   # secure: true in order to force SSL only cookies.
   # config.cookie_options = {}
 
+  # Send a notification email when the user's password is changed
+  config.send_password_change_notification = true
+
   # ==> Configuration for :validatable
   # Range for password length. Default is 6..128.
   config.password_length = 8..128