# Be sure to restart your server when you modify this file.

Panopticon::Application.config.session_store :cookie_store, key: '_panopticon_session'

# Use the database for sessions instead of the cookie-based default,
# which shouldn't be used to store highly confidential information
# (create the session table with "rails generate session_migration")
# Panopticon::Application.config.session_store :active_record_store

# Be sure to restart your server when you modify this file.

Panopticon::Application.config.session_store :cookie_store,
  key: '_panopticon_session',
  secure: Rails.env.production?,
  http_only: true

# Use the database for sessions instead of the cookie-based default,
# which shouldn't be used to store highly confidential information
# (create the session table with "rails generate session_migration")
# Panopticon::Application.config.session_store :active_record_store

Set cookies to only be served over https and to be http only
Set cookies to only be served over https and to be http only
