router.post('/', function(req, res, next) {
req.session.destroy();
var email = req.body.email;
var password = req.body.password;

if(!email || !password) {
    res.status(401).end('Incorrect username or password.');
}
else {
    userBackend.getUserByEmail(email)
        .then(function(user) {
            if(bcrypt.compareSync(password, user.password)) {
                delete user.password;

                console.log('start signing');
                var token = jwt.sign(user, app.get('superSecret'), {
                    expiresInMinutes: 480 // expires in 8 hours
                });
                console.log(token);
                res.json({success: true, user: user, token: token});
            }
            else {
                res.status(401).end('Incorrect username or password.');
            }
        })
        .catch(function(reason) {
            res.status(401).end(reason);
        });
}
});