if logged_in_user = User.find(:first, :conditions => ["username= ? and password = ?", params[:login][:username], params[:login][:password]])