Insecure defaults Until recently, one of the files created in a new Rails project was config/initializers/secret_token.rb. This file looked something like this: # config/initializers/secret_token.rb # Be sure to restart your server when you modify this file. # Your secret key for verifying the integrity of signed cookies. # If you change this key, all old signed cookies will become invalid! # Make

