When a database restore signs you in as someone else

Rails 8’s authentication generator mixes up users after a database restore: cookies that were already in browsers start resolving to other people’s sessions. Write-up with a comic, a demo that runs in your browser, and a PR with the fix: https://msg.samsonov.io/2026-09-30-when-a-database-restore-signs-you-in-as-someone-else/