# One signed-in browser. The browser holds the (signed) session id in a cookie. class Session < ApplicationRecord belongs_to :user end