I noticed this is all done without SSL on the web app. Yes, the JSON calls to Stripe are done via SSL, but that's not obvious to the casual user. Would you recommend that the payment form be served via SSL, even if just to give the user some reassurance?
Why do
require 'csv'
in application.rb and not in product.rb where it's actually used?Why memcached and not redis, for example?
Try OmniAuth with the LDAP strategy: https://github.com/intridea/omniauth-ldap
I noticed this is all done without SSL on the web app. Yes, the JSON calls to Stripe are done via SSL, but that's not obvious to the casual user. Would you recommend that the payment form be served via SSL, even if just to give the user some reassurance?