I'm writing a multi-tenant application where accounts are scoped by subdomains. This adds considerable complexity and I'm starting to worry about security. Each user can have several accounts. For ...
I was wondering if anyone knows what the most secure user access plugin for Rails is, and if any of them prevent session fixation?