title: Rails Authentication with has_secure_password
body: <p>How would I create sessions with rails 3 has_secure_password? I've checked out <a href="http://guides.rubyonrails.org/security.html" rel="nofollow">http://guides.rubyonrails.org/security.html</a>.</p>
  
  <p>And none of it is really specific. do I have to use sessions method? What is the community standard? I do not want to use Devise/Cancan. 
  I only need simple authorization/authentication based on cookies. </p>
  
  <p>Should I be storing User objects in cookies?<br>Would the password be vulnerable?</p>