# Be sure to restart your server when you modify this file.

FinderFrontend::Application.config.session_store :cookie_store, key: "_finder-frontend_session", expire_after: 15.minutes

# Be sure to restart your server when you modify this file.

FinderFrontend::Application.config.session_store :cookie_store,
                                                 key: "_finder-frontend_session",
                                                 expire_after: 15.minutes,
                                                 secure: Rails.env.production?

Set 'secure' flag for session cookie in production
Set 'secure' flag for session cookie in production

This ensures that the session cookie isn't sent over HTTP.  GOV.UK
upgrades requests to HTTPS, so that won't happen normally.
