$app->get('/admin', function ($request, $response, $args) {
    // Sample log message
    $this->logger->info("Slim-Skeleton '/' route");
    if($_SESSION["admin"]==true){
        return $this->renderer->render($response, 'admin.phtml', $args);
    }else{
        return $response->withStatus(401)->withHeader('Location', '/login');
    }

});


$app->get('/login', function ($request, $response, $args) {
    if(isset( $_SESSION["user"])){
        $response->withStatus(200)->withHeader('Location', '/');
        return $this->renderer->render($response, 'index.phtml', $args);
    }else{

        $this->logger->info("Slim-Skeleton '/login' route");
        // Render admin login view
        return $this->renderer->render($response, 'login.phtml', $args);
    }
});

$app->post('/login', function ($request, $response, $args) {
    $sid = session_id();
    $login =$_POST['login'];
    $password =$_POST['password'];
    $user = Users::where('name', $login)->where('password', md5($password))->first();
    if(isset($user) && !empty($user) ){
        $_SESSION["user"] = $login;
        if($user->admin == 1){
            $_SESSION["admin"]=1;
        }
        $sess = new Ses();
        $sess->userId = $user->id;
        $sess->id = $sid;
        $sess->save();
        return $response->withStatus(200)->withHeader('Location', '/');
    }else{
        $args['login_error']=true;
        return $this->renderer->render($response, 'login.phtml', $args);
    }
});

//logout
$app->delete('/login/[{id}]', function ($request, $response, $args) {
    session_destroy();
    $sess = Ses::find($args['id']);
    $sess->delete();
    return $response->withStatus(204);
});

$app->get('/register', function ($request, $response, $args) {
    // Sample log message
    $this->logger->info("Slim-Skeleton '/register' route");
    // Render admin login view
    return $this->renderer->render($response, 'register.phtml', $args);
});

$app->post('/api/users', function ($request, $response, $args) {
    $login =$_POST['login'];
    $password =$_POST['password'];

    $user = users::where('name', $login)
                        ->first();
    if(isset($user) && !empty($user)){
        return $response->withStatus(409);
    }else{
        $user =new users();
        $user->name=$login;
        $user->password=md5($password);
        $user->save();
        return $response->withStatus(201);
    }
});


$app->get('/api/users', function ($request, $response, $args) {

    $users = Users::all();
    $response->getBody()->write($users->toJson());
    return $response;

});

$app->delete('/api/users/[{id}]', function ($request, $response, $args) {

    $user = Users::find($args['id']);
    $user->delete();
    return $this->renderer->render($response, 'index.phtml', $args);

});