Session keys are stored as strings in Rails 3.

Update our session-stripping code.
Insert cookie stripping at correct point in middleware stack.