Sounds more like a problem with your implementation. I'm pretty sure Puma can handle SSE just fine. Your implementation probably depends on EventMachine which is not baked in like it is with Thin.
At least use HTTPS so that our passwords aren't passed in plain text across the internet. Or, like you said, implement some sort of OAuth2 login so we can log in with Twitter, Facebook, GitHub, Persona, etc.
(correction) looks like you can use HTTPS, but it is optional. It should be required on login page at least.
Wow, this is pretty awesome. We run into this issue all the time. Mainly using staging for an external demo, but needing to deploy production updates before the branch on staging is ready to go live. Great work LayerVault!