<div class="row">
  <div class="col-md-6 col-md-offset-3">
    <%= form_for(:session, url: signin_path) do |f| %>

      <%= f.label :email %>
      <%= f.text_field :email, class: 'form-control' %>

      <%= f.label :password %>
      <%= f.password_field :password, class: 'form-control' %>

      <%= f.submit "Sign in", class: "btn btn-primary" %>
    <% end %>

    <p>New user? <%= link_to "Sign up now!", signup_path %></p>
  </div>
</div>

<div id="navbar" class="navbar-collapse collapse">
  <form id="signin-form" class="navbar-form navbar-right" role="form">
    <%= form_for(:session, url: signin_path) do |f| %>
      <%= f.text_field :email, class: 'form-control', placeholder: "Email" %>
      <%= f.password_field :password, class: 'form-control', placeholder: "Password"  %>
      <%= f.submit "Sign in", class: "btn btn-success", id: "signin-btn" %>
    <% end %>
  </form>
</div>

get  'help'     => 'static_pages#help'
get  'about'    => 'static_pages#about'
get  'contact'  => 'static_pages#contact'
get  'signup'   => 'users#new'
get  'signin'    => 'sessions#new'
post 'signin'    => 'sessions#create'
delete 'logout' => 'sessions#destroy'
resources :users
root 'static_pages#home'

class SessionsController < ApplicationController

  skip_before_filter :verify_authenticity_token, :only => :create

  def new
  end

  def create
    user = User.find_by(email: params[:session][:email].downcase)
    if user && user.authenticate(params[:session][:password])
      log_in user
      redirect_to user_path(user)
    else
      flash.now[:danger] = 'Invalid email/password combination'
      render 'new'
    end
  end

  def destroy
  end

end

form_for(:session, url: signin_path)

form_for(:session, url: signin_path, method: :post)

form_for(:session, url: {controller: "session", action: "create"})