fixes #2619: Delete password_hash cookie on sign out
This commit is contained in:
@@ -16,8 +16,8 @@ class SessionsController < ApplicationController
|
|||||||
|
|
||||||
def destroy
|
def destroy
|
||||||
session.delete(:user_id)
|
session.delete(:user_id)
|
||||||
cookies.delete(:cookie_password_hash)
|
|
||||||
cookies.delete(:user_name)
|
cookies.delete(:user_name)
|
||||||
|
cookies.delete(:password_hash)
|
||||||
redirect_to(posts_path, :notice => "You are now logged out.")
|
redirect_to(posts_path, :notice => "You are now logged out.")
|
||||||
end
|
end
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user