require 'bcrypt'

class User < ActiveRecord::Base
  # users.password_hash in the database is a :string
  include BCrypt

  def password
    @password ||= Password.new(password_hash)
  end

  def password=(new_password)
    @password = Password.create(new_password)
    self.password_hash = @password # 'password_hash' must match your column name
  end

  def authenticate(password)
    self.password == password
  end
end

# Create an account
def create
  @user = User.new(params[:user])
  @user.password = params[:password]
  @user.save!
end

# Authenticating a user
def login
  @user = User.find_by_email(params[:email])
  if @user.password == params[:password]
    give_token
  else
    redirect_to home_url
  end
end