Merge pull request #2487 from mroderick/fix/cookie-serializer-json

fix(security): migrate cookie serializer from :hybrid to :json

Author: olleolleolle

config/initializers/cookies_serializer.rb

@@ -2,4 +2,4 @@
 
 # Specify a serializer for the signed and encrypted cookie jars.
 # Valid options are :json, :marshal, and :hybrid.
-Rails.application.config.action_dispatch.cookies_serializer = :hybrid
+Rails.application.config.action_dispatch.cookies_serializer = :json