RailsApps/rails-stripe-membership-saas — pull request #6 by benmanns (2012-10-26 00:16:53+00:00)
Title: Add README entry about changing the secret token

Without changing this token, users of this sample application will be susceptible to session-modification
attacks, because anyone could use the current secret token to sign modified session data.

Additionally, we may want to add a check in an initializer that verifies that the secret token has been changed when in the production environment, and if not, displays a warning message or halts the application.