    # File lib/action_controller/session/cookie_store.rb, line 58
          def initialize(app, options = {})
            # Process legacy CGI options
            options = options.symbolize_keys
            if options.has_key?(:session_path)
              options[:path] = options.delete(:session_path)
            end
            if options.has_key?(:session_key)
              options[:key] = options.delete(:session_key)
            end
            if options.has_key?(:session_http_only)
              options[:httponly] = options.delete(:session_http_only)
            end

            @app = app

            # The session_key option is required.
            ensure_session_key(options[:key])
            @key = options.delete(:key).freeze

            # The secret option is required.
            ensure_secret_secure(options[:secret])
            @secret = options.delete(:secret).freeze

            @digest = options.delete(:digest) || 'SHA1'
            @verifier = verifier_for(@secret, @digest)

            @default_options = DEFAULT_OPTIONS.merge(options).freeze

            freeze
          end