class ApplicationController < ActionController::Base

  # htpasswd :user => 'sketch', :pass => 'scratch'

  include AuthenticatedSystem

  before_filter :current_user

  include ExceptionNotifiable



  helper :all # include all helpers, all the time
  protect_from_forgery # See ActionController::RequestForgeryProtection for details

  def must_be_authenticated
    session[:return_to] = url_for(:controller => request.params[:controller], :action => request.params[:action], :id => request.params[:id])
    redirect_to :controller => 'login' unless session[:user_id]
  end

  def admin_only
    session[:return_to] = url_for(:controller => request.params[:controller], :action => request.params[:action], :id => request.params[:id])
    if @current_user
      redirect_to :controller => 'login' unless @current_user.admin?
    else
      redirect_to :controller => 'login'
    end
  end

  # Scrub sensitive parameters from your log
  filter_parameter_logging :password, :password_confirmation

  p request
end