def create
    @admin = User.find(:all, :conditions => [ "username = ? and password = ?", params[:username], params[:password]])
    if @admin
    else
      redirect_to(admin_url)
    end
  end



## form

<% form_for :admin do |f| %>
  <%= f.text_field :username %>
  <%= f.password_field :password %>
<% end %>