By default, these classes use Marshal for serializing and deserializing messages. Unfortunately, the Marshal format is closely associated with Ruby internals and even changes between different interpreters. This makes the resulting message very hard to impossible to unserialize messages generated by these classes in other environments like node.js.

This patch solves this by allowing you to set your own custom serializer and deserializer lambda functions. By default, it still uses Marshal to be backwards compatible.

Signed-off-by: NJeremy Kemper <jeremy@bitsweat.net>

[#1617 state:resolved]

Add ActiveSupport::MessageVerifier to aid users who need to store tamper-proof messages in cookies etc.

This is particularly useful for things like remember-me tokens in web applications and auto-unsubscribe links in emails.