students.rb

class StudentsController < ApplicationController
  respond_to :html, :xml, :json
  expose(:students) { User.where(:role => :student) }
  expose(:student)


  def new
    student.role = 'student'
    student.build_profile
  end

  def create
    password = 'password'
    options = params[:user].merge(
      :password => password, :password_confirmation => password
    )
    if student.save
      redirect_to new_student_path, :notice => "Student created!"
    else
      render :action => 'new'
    end
  end

  def update
    if student.update_attributes(params[:student])
      redirect_to(student)
    end
  end

  def destroy
    student.destroy
    redirect_to new_student_path, :notice => "Successfully destroyed Student #{params[:id]}"
  end
end