def create
session[:remember_me] ||= params[:remember_me]
session[:referer] = safe_referer(params[:referer]) if params[:referer]
- password_authentication(params[:username], params[:password])
+ password_authentication(params[:username].strip, params[:password])
end
def destroy
- @title = t "sessions.destroy.title"
+ @title = t ".title"
if request.post?
- if session[:token]
- token = UserToken.find_by(:token => session[:token])
- token&.destroy
- session.delete(:token)
- end
-
+ session.delete(:pending_user)
session.delete(:user)
session_expires_automatically