if(params[:user][:username] != "" || params[:user][:password] != "")
      @user = User.find_by_username(params[:user][:username])
      if(@user != nil)
        user_entered_password = params[:user][:password]
        if (@user.password == user_entered_password)
          if(session[:uid] != @user.id.to_s)
            session[:uid] = @user.id.to_s
            session[:fullname] = @user.fullname
            render :action => 'list', :layout => false
          else
            @login_failure = true
            render :action => 'index', :layout => false
          end
        else
          @login_failure = true
          render :action => 'index', :layout => false
        end
      else
        @login_failure = true
        render :action => 'index', :layout => false
      end
    else
      @login_failure = true
      render :action => 'index', :layout => false
    end