class AuthenticationController < ApplicationController def login end def login_post if account = Account.find_by_username_and_password(params[:username], params[:password]) session[:account_id] = account.id render :template => "shop/index" else flash.now[:message] = "Invalid username or password. Signon failed." end end def logout reset_session render :template => "shop/index" end end