title: Rails: Is devise vulnerable to session hijacking?
body: <p>Is <a href="https://github.com/plataformatec/devise/wiki" rel="noreferrer">devise</a> vulnerable to session hijacking over a normal http:// connection? I am having trouble figuring it out from the documentation.</p>