Cookies seem to contain successive registration emails. about overholt HOT 3 OPEN

I dont see anything in that log message that indicates a security problem.

from overholt.

Weird I don't know how I posted that. Here's the correct info.

Session:
<overholt.pages.models.Page object at 0x7f921aaa7cf8>
<overholt.pages.models.Page object at 0x7f921e823668>
pid: 8536|app: 0|req: 7/7 {76 vars in 1580 bytes} [Fri Aug 1 10:25:51 2014] GET /app/api/pages/?_=1406886563513 => generated 304 bytes in 31 msecs (HTTP/1.1 200) 3 headers in 313 bytes (1 switches on core 0)
Loads user from session or remember_me cookie as applicable
Session:
<SecureCookieSession {'_id': '85a6b08909dc7cca4a9af6efc1a744d6', '_fresh': False, 'csrf_token': '60b666e8f6a3be842dadc2a95fbfa0554e90ddd3', 'user_id': '2'}>
pid: 8536|app: 0|req: 8/8 {80 vars in 1662 bytes} [Fri Aug 1 10:25:52 2014] POST /app/api/users/generalstatedata/ => generated 18 bytes in 21 msecs (HTTP/1.1 200) 3 headers in 312 bytes (1 switches on core 0)
Loads user from session or remember_me cookie as applicable
Session:
<SecureCookieSession {'_id': '6948290bcaabea200d00961712d41d83', '_fresh': True, 'csrf_token': 'b345ae0a9bef46fdb0954abc191c71933d802a27', 'user_id': '64', 'flashes': [('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].'), ('success', 'Thank you. Confirmation instructions have been sent to [email protected].')]}>
1406897085.935562##2a8138c699742410a48cb59b36688213359b04f0
pid: 8536|app: 0|req: 9/9 {72 vars in 1818 bytes} [Fri Aug 1 11:44:45 2014] GET /app/api/users/getcsrf?=1406868451149 => generated 97 bytes in 7 msecs (HTTP/1.1 200) 3 headers in 589 bytes (1 switches on core 0)
Loads user from session or remember_me cookie as applicable

from overholt.

It looks like Github is removing the info from my post becauise it contains email addresses. I have put it here on SO instead.

http://stackoverflow.com/questions/25089438/overholt-successive-login-addresses-in-cookie

from overholt.