Hacker News Reader

You can't log any arbitrary out of their sessions. It only resets your session, as in the session cookie is reset.

No, you, as an evil website operator, can cause anyone who visits your site to log out of any arbitrary rails site.