LDAP Omniauth session code (post ldap improving)

gistfile1.rb

def create
	ldap_user = ActiveDirectoryUser.authenticate(params[:username], params[:password])
	user = User.find_by_provider_and_uid("ldap",params[:username]) || User.create_with_omniauth("ldap",params[:username])
	user.name = ldap_user.name
	user.groups = ldap_user.groups.join(",")
	user.save
	if LDAP_AllowedGroups != (LDAP_AllowedGroups - user.groups.split(",")) then
		session[:user_id] = user.id
		redirect_to "/pages/splash"
	else
		redirect_to "/", :notice => "Succesful Login, but you don't have permission to use this application"
	end
end