def create
    self.current_user = User.authenticate(params[:login], params[:password])
    if logged_in?
      redirect_to request.env["HTTP_REFERER"] || '/'
    else
      # keep the registration form happy
      @user = User.new
      render :action => 'new'
    end
  end