Rails 4: Session Expiry?
Rails has “tamper-proof” session cookies. To prevent session hash tampering, a digest is calculated from the session with a server-side secret and inserted into the end of the cookie. Just make sure you have a long secret. If you want to periodically reset all user sessions change your secret. To answer your question, if you … Read more