//routes/index.js
exports.login.post = function(req, res){
  req.assert('username', 'Please enter username').notEmpty();
  req.assert('password', 'Please enter password').notEmpty();
  res.locals.errors = req.validationErrors(true);

  if ( res.locals.errors ) {
    console.log(res.locals.errors);
    var d = { title: 'Login' };
    res.render('login', { d: d });
    return;
  }

 //do login here if no errors
};

app.post('/form_process',validateForm,form.handle)
function validateForm(req,res,next){
req.assert('username', 'Invalid Username').notEmpty().isAlpha();
req.assert('password', 'Invalid Password').notEmpty().isAlpha();

var errors = req.validationErrors();
if (errors) {
//res.send(errors,500);
var    original_values = {
username : req.param('username'),
password : req.param('password')
}
res.render('login',{errorMsg:errors,original:original_values,title:"Login error"})
return;
}
else next()
}

if ( res.locals.errors )
{
  res.flash('error','bad username/password');
  req.session.formData = req.body;
  res.redirect('back');
}