gistfile1.rb

# in config/environment.rb :

config.action_controller.session = {
    :key    => '_myapp_session',
    :secret => 'super_very_long_key_more_than_30_chars',
    #:secure => true, # Only enable secure here if your dev env is using ssl, which is certainly not the case
    :expire_after => 3600 # 1 hour
  }