I've added a box in Chapter 9 addressing some of your concerns: http://www.railstutorial.org/chapters/sign-in-sign-out#sidebar:session_cookie http://www.railst

I've added a box in Chapter 9 addressing some of your concerns: http://www.railstutorial.org/chapters/sign-in-sign-out#sidebar:session_cookie http://www.railstutorial.org/chapters/sign-in-sign-out#sideb... Thanks again for bringing this to my attention! :-)