Heru Quipper Question Updated

# file application_controller
def render_error(payload, status_code = :bad_request)
  # status code can be override to 403, 404, or even 500 as needed
  render json: {error: payload, success: false}.to_json, status: status_code
end

def render_success(payload, includes = nil, status_code = :ok)
  # status code can be override to 201 for new item creation
  render json: {data: payload, success: true}.to_json(:include => includes), status: status_code
end

# file auth_controller
def auth
   user = User.where(email: params[:username]).first
   if user && user.authenticate(params[:password])
     render_success(user)
   else
     render_error("wrong username or password", :unauthorized)
   end
end