Trying to get authlogic running

app/controllers/application_controller.rb

@@ -5,6 +5,12 @@ class ApplicationController < ActionController::Base
 
   before_filter :create_user_token
 
+  # Do not mention passwords in the log file
+  # filter_parameter_logging :password
+
+  # AuthLogic
+  helper_method :current_user_session, :current_user
+
   # Assign the visitor a unique hash so that we can track their uploads
   # and show them even before moderation.
   def create_user_token
@@ -12,4 +18,46 @@ class ApplicationController < ActionController::Base
     session[:ip] ||= request.remote_ip
   end
 
+  # -----------------
+  private
+
+  def current_user_session
+    return @current_user_session if defined?(@current_user_session)
+    @current_user_session = UserSession.find
+  end
+
+  def current_user
+    return @current_user if defined?(@current_user)
+    @current_user = current_user_session && current_user_session.user
+  end
+
+  def require_user
+    logger.debug "ApplicationController::require_user"
+    unless current_user
+      store_location
+      flash[:notice] = "You must be logged in to access this page"
+      redirect_to new_user_session_url
+      return false
+    end
+  end
+
+  def require_no_user
+    logger.debug "ApplicationController::require_no_user"
+    if current_user
+      store_location
+      flash[:notice] = "You must be logged out to access this page"
+     # redirect_to home_index_path
+      return false
+    end
+  end
+
+  def store_location
+    #session[:return_to] = request.request_uri
+  end
+
+  def redirect_back_or_default(default)
+    redirect_to(session[:return_to] || default)
+    session[:return_to] = nil
+  end
+
 end

app/controllers/user_sessions_controller.rb

@@ -0,0 +1,22 @@
+class UserSessionsController < ApplicationController
+
+  def new
+    @user_session = UserSession.new
+  end
+
+  def create
+    @user_session = UserSession.new(params[:user_session])
+    if @user_session.save
+      flash[:notice] = "Login successful!"
+      redirect_back_or_default account_url(@current_user)
+    else
+      render :action => :new
+    end
+  end
+
+  def destroy
+    current_user_session.destroy
+    flash[:notice] = "Logout successful!"
+    redirect_back_or_default new_user_session_url
+  end
+end

app/controllers/users_controller.rb

@@ -0,0 +1,43 @@
+class UsersController < ApplicationController
+
+  before_filter :require_user, :only => [:show, :edit, :update]
+
+  def new
+    @user = User.new
+  end
+
+  def create
+    @user = User.new(params[:user])
+
+    # Saving without session maintenance to skip
+    # auto-login which can't happen here because
+    # the User has not yet been activated
+    if @user.save
+      flash[:notice] = "Your account has been created."
+      redirect_to signup_url
+    else
+      flash[:notice] = "There was a problem creating you."
+      render :action => :new
+    end
+
+  end
+
+  def show
+    @user = current_user
+  end
+
+  def edit
+    @user = current_user
+  end
+
+  def update
+    @user = current_user # makes our views "cleaner" and more consistent
+    if @user.update_attributes(params[:user])
+      flash[:notice] = "Account updated!"
+      redirect_to account_url
+    else
+      render :action => :edit
+    end
+  end
+
+end