Rails session cookies and digital signatures