auth.go

func identifyUserFromForm(r *http.Request) User {
	err := r.ParseForm()
	email := r.Form.Get("email")
	password := r.Form.Get("password")
	du := User{}

	u, err := du.FindOneUserByEmail(email)

	if err != nil {
		log.Fatal(err)
	} else {
		passwordPlainText := []byte(fmt.Sprintf("%s%s", u.Password_salt, password))

		err = bcrypt.CompareHashAndPassword([]byte(u.Password_hash), []byte(passwordPlainText))
		if err == nil {
			log.Printf("user %s auth ok\n", u.Email)
			return u
		}
	}

	return du
}