How to almost protect yourself from the Rails cookie session store
happybearsoftware.com