public function login()
    {
        var referer = session.get("referer");
        if (null == referer)
        {
            referer = controllerContext.request.clientHeaders.get("Referer");
            if (!referer.endsWith(new UrlHelperInst(controllerContext.requestContext).current()))
                session.set("referer", referer);
        }
        var form = new Form("login");
        form.model.schema = new Schema()
            .add("username", Value.string(), "user name")
            .add("password", Value.password(), "password");

        var result : ActionResult = null;
        var me = this;
        form.action = new Trigger("login", "login", function() {
            if (form.model.isValid())
            {
                var adapter = cast(Auth.auth.adapter, HxRepoAdapter);
                adapter.username = form.model.data.username;
                adapter.password = form.model.data.password;
                var auth = Auth.auth.authenticate();
                if(auth.isvalid)
                {
                    me.addMessage("successfully logged in");
                    if(null == referer)
                    {
                        result = new RedirectToControllerResult("home");
                    } else {
                        me.session.remove("referer");
                        result = new RedirectResult(referer);
                    }
                } else {
                    var input : Control<String> = cast form.componentByPath("login.username");
                    trace(input);
                    var errors = input.errors.get();
                    if (null == errors)
                    {
                        errors = [];
                        input.errors.set(errors);
                    }
                    errors.push(new Message("invalid credentials for '{0}'", form.model.data.username));
                }
            }
        });
        this.fillForm(form);

        return null == result ? view( { form : form } ) : result;
    }