rails_auth.rb

  def authenticate_with_email_and_password
    passenger = Passenger.find_by_email(params[:email])
    if passenger
      if passenger.valid_password?(params[:password])
        if passenger.confirmed?
          passenger
        else
          render :json => {:result => "failure",:error => "not confirmed"}.to_json
          return
        end
      else
        render :json => {:result => "failure",:error => "wrong email or password"}.to_json
        return
      end
    else
      render :json => {:result => "failure",:error => "wrong email or password"}.to_json
      return
    end
  end

  def login
    passenger = authenticate_with_email_and_password
    passenger.reset_authentication_token!
    @token = passenger.authentication_token
    @result = "success"
  end