Protect against interception of confirmation emails
authorTom Hughes <tom@compton.nu>
Mon, 15 Nov 2010 21:41:32 +0000 (21:41 +0000)
committerTom Hughes <tom@compton.nu>
Mon, 15 Nov 2010 21:41:32 +0000 (21:41 +0000)
commit7f3d37867b7f35e6003f20803d3779a302c3f505
treeb48950fa7072d092ebb4e125c87725c5c878f389
parent60fc060d2736ecf7a69cff4e3c4a38bfa73c81b0
Protect against interception of confirmation emails

When processing an account confirmation email don't automatically
log the user in unless their browser session has a token that
matches the same user. Closes #3337.
app/controllers/user_controller.rb