Securing the Rails session secret