rhcc-authenticate.rb

def authenticate email, password
  user = User.find_by_email email
  
  if password.nil? || email !=~ /\A([\w+\-].?)+@[a-z\d\-]+(\.[a-z]+)*\.[a-z]+\z/i || user.nil?
    return false
  end

  encrypted_password = BCrypt::Password.new password
  if user.encrypted_password == encrypted_password
    user
  else
    false
  end
end