Chris Wanstrath has put together an excellent guide to sessions in Ruby on Rails. He covers a whole ton of gotchas and features that I'd never known about before. Did you know that if you specify session :off in your application.rb that session can still be created automatically in certain situations? If not, check it out, there's a lot of great information.