Comment by excid3

The countermeasures to session fixation are covered in the official Rails guides: https://guides.rubyonrails.org/security.html#session-fixatio...