class PasswordsController < ApplicationController
  def edit
    render :locals => { :user => current_user }
  end

  def update
    @user = User.find(current_user.id)
    if @user.valid_password?(params[:old_password])
      @user.password_updated_at = DateTime.now
      if @user.update_attributes(params[:user])
        flash[:notice] = "Password has been updated"
        #sign_in @user, :bypass => true
        redirect_to root_path
      else
        flash[:errors] = @user.errors
        render "edit", :locals => { :user => @user }
      end
    else
      @user.errors.add(:password, 'Old password is incorrect')
      flash[:errors] = @user.errors
      render "edit", :locals => { :user => @user }
    end
  end
end