class LoginController < ApplicationController
  def index
  end

  def authenticate(username=params[:login][:username], password=params[:login][:password])
    if user = User.authenticate(username, password)
      @session[:valie] = true
      @session[:user_id] = user.id
      @session[:username] = user.username
      if @session[:return_to]
        redirect_to_path($session[:return_to])
        @session[:return_to] = nil
      else
        redirect_to :controller => "Admin"
      end
    else
      flash[:alert] = "Login failed!"
      render :action => "index"
    end
  end

  def logout
    reset_session
    flash[:alert] = "Logged out"
    redirect_to :action => "index"
  end
end