Stealing user session with open-redirect bug in Rails
homakov.blogspot.ch