# SESSIONS
# where did you enable sessions?

# WHAT REQUEST ALLOWS A USER TO LOGIN?
get '/sessions/new' do
  erb :'users/login'
end


# WHAT REQUEST SENDS THE USER DATA TO SET THE SESSION?
# example without implementing BCrypt
post '/sessions' do
	user = User.find_by(email: params[:email])
	if user && user.password == params[:password]
		login(user)
		redirect '/'
	else
  	erb :'users/login'
	end
end


# WHAT REQUEST WILL FORCE A SESSION TO END?
get '/logout' do
	logout!
end

# BONUS: WHAT REQUEST ALLOWS US TO INSPECT THE SESSION?
get '/session-viewer' do
	session.inspect
end