exports.login = function (req, res){
	User.findUser(req.body.username, function(err, user) {
        if (!err) {
            console.log(user);
            if (user === null){
            	return res.send(Boom.forbidden("invalid username or password"));
            }
            if (req.body.password === Common.decrypt(user.password)) {
                if(!user.isVerified){
                	return res.send(Boom.forbidden("Your email address is not verified. please verify your email address to proceed"));
                }
                else{
	                var tokenData = {
	                    username: user.username,
	                    scope: [user.scope],
	                    id: user._id
	                };
	                var result = {
	                    username: user.username,
	                    scope: user.scope,
	                    token: Jwt.sign(tokenData, privateKey)
	                };

	                return res.json(result);
                }
            } else{
            	return res.send(Boom.forbidden("invalid username or password"));
            }
        } else {
            if (11000 === err.code || 11001 === err.code) {
                return res.send(Boom.forbidden("please provide another user email"));
            } else {
                    console.error(err);
                    return res.send(Boom.badImplementation(err));
            }
        }
    })
}