login_controller.rb

class LoginController < ApplicationController
  skip_before_filter :check_authentication, :only => :index

  def index
    @user = User.find_by_email(params[:email])
    if @user && @user.authenticate(params[:password])      
      render 'login/index'
    else
      record_not_found
    end
  end  
  
  private
  def login_params
    params.require(:login).permit(:email, :password)
  end
end

users_controller.rb

class UsersController < ApplicationController
  def index
    @users = User.all
  end

  def create
    @user = User.new(user_params)
    @user.password = 'lallu'
    @user.password_confirmation = 'lallu'
    @user.parent = @current_user

    logger.info @user.inspect

    unless @user.valid? and @user.save
      bad_request
    end

  end

  private
  def user_params
    params.require(:user).permit(:first_name, :mobile_number, :email, :locality, :city, :user_type)
  end
end