Rails/RSpec: reset_session not changing Set-Cookie HTTP header value during integration tests...

Secure Member Login Using Cookies...

Can you give me an example of a session fixation attack?...