sessions_controller.rb

class SessionsController < ApplicationController
  # user shouldn't have to be logged in before logging in!
  skip_before_filter :set_current_user
  def new
    # code to enable user to login; should submit to 'create' action
  end
  def create
    # determine which user has successfully logged in, then:
    session[:user_id] = user.id
    flash[:notice] = 'You have successfully logged in.'
    redirect_to movies_path
  end
  def destroy
    # forget the valid user
    session.delete(:user_id)
    flash[:notice] = 'You have successfully logged in.'
    redirect_to movies_path
  end
end