working login, signup, and logout

app/models/user.rb

@@ -1,3 +1,18 @@
 class User < ActiveRecord::Base
-  attr_accessible :email, :password, :user_id, :admin
+  attr_accessible :email, :password, :user_id, :admin, :password_confirmation
+  validates_confirmation_of :password, :password_confirmation
+  validates_presence_of :password, :on => :create
+  validates_presence_of :email
+  validates_uniqueness_of :email
+  
+  def self.authenticate(email, password)
+       auth = nil
+       user = find_by_email(email)
+       # I heard something about hashing, dunno, why bother really. Nobody will get access to my stuff!
+       if user && user.password == password
+        auth = user
+       end
+       return auth
+  end
+    
 end