title: rails 3 authenticity_token how it is generated
body: <p>does any one know how the authenticity_token of rails3 is generated?
  I noticed that the value of the token of a form does not change when I refresh the form page. 
  who is it generated? based on session cookie? on time? secret_key?</p>