class SessionController < ApplicationController def login
user = User.find_by_name_and_password(params[:user], params[:password]) if user
session[:user_id] = user.id
redirect_to :action => "index"
else
reset_session
flash[:note] = "Invalid user name/password"
end end