title: Is it ok to temporarily store password in session variable?
body: <p>I am trying to implement a multistep form in rails using Devise.  I plan on storing the information in session variables to persist from one step to the next.  My question is, is it ok to store the password in plain text in a session variable and then clear it once done with the form?</p>