rails/rails — pull request #4429 by marcinbunsch (2012-01-12 19:39:07+00:00)
Title: When force redirecting to SSL, make sure that the session is kept

This implements the fix submitted in issue #1923.

The logic behind is that we're redirecting from a non-secure environment to a secure environment, so the session cookie must be available in both.

However if the app is running in force_ssl mode, this change makes no difference, so it's beneficial if you work in a split environment.