Padrino sets the session secret to a random value on startup if you don't set it yourself. This means that: 1) you can only run a single instance. Multiple ins

Padrino sets the session secret to a random value on startup if you don't set it yourself. This means that: 1) you can only run a single instance. Multiple instances will generate different secrets and not accept each others' cookies 2) restarting an instance (for instance doing a deploy) generates a new secret and invalidates all previous cookies Neither of these are desirable, and to avoid it the docs recommend [1] you set the session secret yourself via: set :session_secret, 'super secret' which gives you the exact problem the blog post is addressing, so it does not seem that Padrino does any better here. [1] - http://padrinorb.com/guides/controllers/sessions/ http://padrinorb.com/guides/controllers/sessions/