authenticate: aUser password: aPassword
    "Authenticates a user against the database, and creates a Session for the user on success"

    | user |
    db
        rawQuery: 'SELECT * FROM "Users" WHERE "username" = ''' , aUser , ''' AND "password" = ''' , aPassword
                , ''''.
    user := db asSingleResult.
    user ifNil: [^False].
    "If the user exists, then create a session for them"
    Session userId: (user at: 1).
    ^True