def create

    self.current_user = User.authenticate(params[:login], params[:password])

    if logged_in?
      session[:id]=self.current_user.id
      if params[:remember_me] == "1"
        current_user.remember_me unless current_user.remember_token?
        cookies[:auth_token] = { :value => self.current_user.remember_token , :expires => self.current_user.remember_token_expires_at }
      end
      if current_user.has_role?("admin") || current_user.has_role?("subadmin")
        if session[:return_to]
          redirect_back_or_default('/')
        else
          redirect_to(admin_index_path)
        end
      else
      	redirect_back_or_default('/')
      end
      #redirect_to('/myaccount')
      flash[:notice] = "Logged in successfully as : "+ current_user.login
    else
    	#flash[:notice] = "Couldn't log you in as : "+ params[:login]
      flash[:notice] = "ERROR"
    	redirect_to :action => :new

      #render :action => 'new'
    end
  end