From 13b03e3f6c5f72d82634383dab58e291fce66900 Mon Sep 17 00:00:00 2001
From: Matt Huntington <matt.huntington@gmail.com>
Date: Thu, 25 Aug 2016 10:57:52 -0400
Subject: [PATCH] check username/password of req.body with users in db

---
 controllers/sessions.js | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/controllers/sessions.js b/controllers/sessions.js
index 7995aec..cc0caa1 100644
--- a/controllers/sessions.js
+++ b/controllers/sessions.js
@@ -1,6 +1,7 @@
 var express = require('express');
 var bodyParser = require('body-parser');
 var controller = express.Router();
+var Users = require('../models/users.js');
 
 controller.use(bodyParser.urlencoded({extended:true}));
 
@@ -9,7 +10,17 @@ controller.get('/new', function(req, res){
 });
 
 controller.post('/', function(req, res){
-	res.send(req.body);
+	Users.find({
+		where: {
+			name: req.body.name
+		}
+	}).then(function(foundUser){
+		if(foundUser.password == req.body.password){
+			res.redirect('/');
+		} else {
+			res.redirect('/sessions/new');
+		}
+	});
 });
 
 module.exports = controller;