def api
    @api = true
    respond_to do |format|
      format.xml {
        render :xml => XmlRpc::API::Base.handle_request(self, params[:rpc], self.method_name_map).xml
      }
    end
  end

  def method_name_map
    @method_name_map ||= { 'thing.createThing' => :rpc_create }
  end

  def rpc_create(username, password, struct)
    logger.debug "username = #{username}, password = #{password}"
    self.current_user = User.authenticate(username, password) if username && password
    raise XmlRpc::API::Fault.new("You are not permitted to perform this action, user name or password invalid", 1) unless self.logged_in?
    self.params = struct.symbolize_keys
    ....
    {:return => :something}
  end