Cookie-based authentication with Rails Alexandre Ruban