class Sessions < Application

  before :ensure_authenticated, :only => [:create, :openid]

  def new
    render
  end

  def create
    url = session[:return_to] || '/'
    session[:return_to] = nil
    redirect url
  end

  def openid
    url = session[:return_to] || '/'
    session[:return_to] = nil
    redirect url
  end

  def destroy
    session.user.forget_me! unless session.user.nil?
    cookies.delete :auth_token
    session.abandon!
    redirect '/'
  end

end