By setting the session middleware as an option, rack protection for sessions will be enabled by default and other session settings will be applied to the middleware.