You can clone with
No one assigned
The http_only fix from 11 months ago is tagged as being in the 2.1.9 gem, but the fix isn't in the gem.
Installed the gem with bundler from the rails2 branch and it brought in the fix.
+1, this seems to still be an issue. As above, fixed with:
gem 'authlogic', :git => 'git://github.com/binarylogic/authlogic.git', :branch => 'rails2'