psi-4ward

// controllers/LoginController.js

module.exports = {
  index: function(req, res) {

    var email = req.param('email');
    var password = req.param('password');

    // delay everthing to prevent bruteforce, dos and timing attacks
    setTimeout(function() {