func userLogin(w http.ResponseWriter, req *http.Request) {

	if req.Method != "POST" {
		return
	}

	db := createConnection()

	w.Header().Set("Content-type", "application/json")

	if err := db.Connect(); err != nil {
		json.NewEncoder(w).Encode(map[string]bool{"success": false})
		log.Println(err)
		return
	}

	username := req.FormValue("User")
	pass := req.FormValue("Password")
	if len(username) == 0 || len(pass) == 0 {
		sendJSON(w, "Missing username or password")
		return
	}

	user := User{
		User:     username,
		Password: pass,
	}

	// Prepare the statement and execute
	stmt, err := db.Prepare("SELECT * FROM tblusers WHERE userid=(?)")
	if err != nil {
		sendJSON(w, err.Error())
		return
	}
	resp, err := stmt.Run(user.User)
	if err != nil {
		log.Println(err)
		sendJSON(w, err)
		return
	}
	row, err := resp.GetRow()
	if err != nil {
		log.Println(err)
		sendJSON(w, err)
		return
	}
	if len(row) == 0 {
		sendJSON(w, "User not found")
		return
	}
	// Create a User instance from the SQL Results.
	req_user := User{
		row.Str(1),
		row.Str(2),
	}

	// if we've got here, we either are logged in or not.
	sendJSON(w, user == req_user)
	return
}