by pjones — 8 May 2008

A look at what happens when you disable the session in your Rails application controller and want to enable it elsewhere. Also, what happens when you disable sessions, but forget to disable forgery protection? Rails Gotcha #9.