solved a terrible security issue and regenerated the rails session key