$('form.login').submit(function (e) {

dataType: 'json',
  data: data,
  contentType: 'application/json',
  url: '/api/signin',
  success: function (res) {
    window.location('/')
  },
  error: function (res) {
    $('#errorLine').show()
  }

})

signin: function (req, res) {
console.log(req.data)
User.findOne({username: req.body.username, password: req.body.pwd}, 'name username dp', (err, user) => {
  if (!err) {
    if (user) {
      console.log(user)

      res.cookie('name', user.name)
      res.cookie('username', user.username)
      res.cookie('dp', user.dp)
      // req.session.insession = true
      res.status(200).send('ok')
    } else {
      res.status(400).send('Invalid credentials ')
    }
  } else {
    console.log(err.stack)
    res.status(400).send('invalid credentials')
  }
})