Use secure session store by default in production env

MetaMeute · Aug 11, 2014 · d462aef · d462aef
1 parent c31925a
commit d462aef
Showing 1 changed file with 5 additions and 9 deletions.
diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
@@ -1,11 +1,7 @@
 # Be sure to restart your server when you modify this file.
 
-Frab::Application.config.session_store :active_record_store, key: '_frab_session'
-
-# Example for a cookie store, with secure flag set for SSL hosting in production mode
-#
-# Frab::Application.config.session_store :cookie_store,
-#                                       key: '_frab_session',
-#                                       secure: Rails.env == 'production',
-#                                       httponly: true,
-#                                       expire_after: 60.minutes 
+Frab::Application.config.session_store :cookie_store,
+                                      key: '_frab_session',
+                                      secure: Rails.env == 'production',
+                                      httponly: true,
+                                      expire_after: 60.minutes