session controller

gistfile1.rb

class SessionsController < ApplicationController
   skip_before_filter :login_required, :only => [:new, :create]

   layout nil

  def new
    render #:layout => nil
  end

  def create
    user = User.authenticate(params[:username], params[:password])
    if user
      session[:user_id] = user.id
      logger.info "User '#{user.username} logged in"

      flash[:notice]= "Welcome back #{user.name}!"
      redirect_to_target_or_default(root_url)
#      redirect_to root_url, :notice => "Logged in!"
    else
      logger.info "Failed login: u=#{params[:username]}"
      flash.now[:alert]= "Invalid username or password"

      render :action => 'new' #, :layout => nil
    end
#    puts current_user.inspect
  end


  def destroy
    logger.info "User '#{current_user.username} logged out" if current_user
    session[:user_id] = nil
    redirect_to login_url, :notice => "Logged out, bye."
  end

end