SECURITY: prevent reuse of password reset

spec/components/secure_session_spec.rb

@@ -0,0 +1,16 @@
+require 'rails_helper'
+require_dependency 'secure_session'
+
+describe SecureSession do
+  it "operates correctly" do
+    s = SecureSession.new("abc")
+
+    s["hello"] = "world"
+    s["foo"] = "bar"
+    expect(s["hello"]).to eq("world")
+    expect(s["foo"]).to eq("bar")
+
+    s["hello"] = nil
+    expect(s["hello"]).to eq(nil)
+  end
+end