## View

<div class="ContentBlock">
  <h3>Freundesliste von <%= current_user.login %></h3>
  <br />
  <%= start_form_tag %>
    <%= text_field_with_auto_complete(:user, :login, {}, :skip_style => true) %>
  </form>
</div>


## Controller
class AccountController < ApplicationController

  before_filter :login_required, :except => [ :login, :signup, :logout ]

  layout "default"

  def index

  end

  def login
    return unless request.post?
    self.current_user = User.authenticate(params[:login], params[:password])
    if current_user
      if params[:remember_me] == "1"
        self.current_user.remember_me
        cookies[:auth_token] = { :value => self.current_user.remember_token , :expires => self.current_user.remember_token_expires_at }
      end
      redirect_to :controller => "portal", :action => "index"
      flash[:notice] = "Logged in successfully"
    end
  end

  def signup
    @captcha_string = rand(9).to_s + rand(9).to_s + rand(9).to_s + rand(9).to_s
    @user = User.new(params[:user])
    return unless request.post?
    @user.photo_album_settings = PhotoAlbumSettings.new
    @user.save!
    self.current_user = @user
    redirect_to :action => "index", :controller => "portal"
    flash[:notice] = "Thanks for signing up!"
  rescue ActiveRecord::RecordInvalid
    render :action => 'signup'
  end

  def logout
    self.current_user.forget_me if logged_in?
    cookies.delete :auth_token
    reset_session
    flash[:notice] = "You have been logged out."
    redirect_to :controller => "portal", :action => "index"
  end

  def friends
  end

  def ignore
  end

  def auto_complete_for_user_login
    return unless request.xhr?
    @user_list = User.find(:all, :order => "login DESC", :limit => 10, :conditions => [ "login LIKE ?", params[:user][:login] + "%" ])
    render :inline => "<%= auto_complete_result @user_list, 'login' %>"
  end
end