4 Commits

Author	SHA1	Message	Date
albert	f52181db94	Major revamp of security. Passwords are first SHA1 hashed and then ... that hash is bcrypted. Bcrypted hashes are stored in a new column on users. This separate column is only to allow for rollbacks, eventually the old SHA1 hash column will be removed. Sensitive cookie details are now encrypted to prevent user tampering and more stringent checks on secret_token and session_secret_key are enforced.	2013-03-04 22:55:41 -05:00
albert	17881068e1	* Removed Pixa/Tinami sources ... * Upgraded to Rails 3.2.3 * Fixed tests	2012-06-01 19:22:58 -04:00
albert	c453e7db0f	implemented password resets	2011-07-20 15:54:17 -04:00
albert	72e9da01b5	fixing functional tests	2011-07-17 16:42:26 -04:00