rubyonrails Active Record Session Store Vulnerabilities