/* POST login. */
router.post('/login', function (req, res, next) {
    if (req.body.username == "admin" && req.body.password == "admin") {
        req.session.csrf = generateToken(); // set a UUID or unique value as the session csrf value
        req.session.user = req.body.username;
        res.redirect('home');
    } else {
        res.render('../public/views/login', {message: 'Invalid username or password!'});
    }
});