elricstorm/session_store.rb

## session_store.rb
Yourapp::Application.config.session_store :cookie_store

Yourapp::Application.config.session = {
  :key          => '_yourapp_session',          # name of cookie that stores the data
  :domain       => nil,                         # you can share between subdomains here: '.subdomain.com'
  :expire_after => 1.month,                     # expire cookie
  :secure       => false,                       # for https its true
  :httponly     => true,                        # a measure against XSS attacks, prevent client side scripts from accessing the cookie

  :secret      => 'YOUR SECRET GOES HERE'       # RUN RAKE SECRET to generate secret
}
	Yourapp::Application.config.session_store :cookie_store

	Yourapp::Application.config.session = {
	:key => '_yourapp_session', # name of cookie that stores the data
	:domain => nil, # you can share between subdomains here: '.subdomain.com'
	:expire_after => 1.month, # expire cookie
	:secure => false, # for https its true
	:httponly => true, # a measure against XSS attacks, prevent client side scripts from accessing the cookie

	:secret => 'YOUR SECRET GOES HERE' # RUN RAKE SECRET to generate secret
	}