Improve session security in Rails apps

Posted in February 2015 

In Rails applications, it’s really easy to allow users to login to your application. You ask them for a username & password, you check they’re correct and you pop their...