@app.route("/login", methods=["GET", "POST"])
    def login():
        error = None

        if request.method == 'POST':
            uname = request.form['uname']
            pword = hashlib.md5(request.form['password']).hexdigest()
            db = get_db()

            cur = db.execute("select username, password from users where username='%s' and password='%s'" %(uname, pword))
            result = cur.fetchall()
            if len(result) == 1:
                resp = make_response(redirect(url_for('board')))
                session['username'] = uname
                resp.set_cookie('loggedin', 'true')
                return resp