master
 1class SessionsController < ApplicationController
 2  def new
 3    redirect_to my_dashboard_path if current_user?
 4    @session = UserSession.new
 5  end
 6
 7  def create
 8    if @session = User.login(session_params[:email], session_params[:password])
 9      reset_session
10      session[:raphael] = @session.access(request)
11      redirect_to my_dashboard_path
12    else
13      flash[:error] = t("sessions.create.failure.invalid")
14      redirect_to login_path
15    end
16  end
17
18  def destroy
19    user_session.revoke!
20    reset_session
21    redirect_to root_path
22  end
23
24  private
25
26  def session_params
27    params.require(:session).permit(:email, :password)
28  end
29end