I want to use infinite sessions in my application. Right now I have the following in my controller: protected def update_session_key secure_with_facebook_params! if facebook_session.infinite? # Store the session key in the DB end end and I ask for the permission with the fbml tags. I then call update_session_key on every request, in case they decided to give me permission. Is there a better way of going about this? I am particularly concerned by the use of secure_with_facebook_params! which seems kind of hacky.