title: InvalidAuthenticityToken between subdomains when logging in with Rails app
body: <p>I just added SSL on secure.mydomain.com. When someone logs in, they POST from a form on the main (www) subdomain to the secure subdomain. That's causing an InvalidAuthenticityToken error to be generated.</p>
  
  <p>I've read that it's necessary to share session data across subdomains. To do this, I've already added:</p>
  
  <pre><code>config.action_controller.session = { :domain =&gt; '.mydomain.com' }
  </code></pre>
  
  <p>to config/environments/production.rb. This, unfortunately, has not fixed the problem.</p>
  
  <p>Thanks for any help!</p>