You should consider including `secret_token` here to avoid invaliding sessions generated by Rails 3. See the "2.6 Action Pack" section here for details: http://edgeguides.rubyonrails.org/upgrading_ruby_on_rails.html for details.