By default Rails creates session files under {RAILS_ROOT}/tmp/session
Use this script to remove sessions more than a day old. You may add it to cron to automate.
find . -name “ruby_sess*” -ctime +1 -exec rm -f \{} \;