diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb
new file mode 100644
--- /dev/null
+++ b/config/initializers/session_store.rb
@@ -0,0 +1,8 @@
+# Be sure to restart your server when you modify this file.
+#CafeGrader::Application.config.session_store :cookie_store, key: '_cafe_grader_web_session'
+
+# Use the database for sessions instead of the cookie-based default,
+# which shouldn't be used to store highly confidential information
+# (create the session table with "rails generate session_migration")
+
+CafeGrader::Application.config.session_store :active_record_store