Make session cookies more secure.
authorElrond <elrond+mediagoblin.org@samba-tng.org>
Tue, 9 Apr 2013 20:49:11 +0000 (22:49 +0200)
committerElrond <elrond+mediagoblin.org@samba-tng.org>
Tue, 9 Apr 2013 20:49:11 +0000 (22:49 +0200)
commitb0ee3aae91fa49b25b84dce20931e970639d17fe
treed972593ab4f2f6767c90b31644eb54289e1c95df
parent82a40cc4e145e4fdf5f81d7b6319cf713afa44c1
Make session cookies more secure.

1. Our session cookies only need to be available to http, so
   mark them appropiately.

2. Send the cookie to the subpath for mediagoblin.

And instantiate a session manager on the app, once.
mediagoblin/app.py
mediagoblin/tools/session.py