post '/user/login' do
  request.body.rewind
  login_details = JSON.parse(request.body.read)
  
  email = login_details['email']
  password = login_details['password']

  res = User.find_by(email: email).try(:authenticate, password)      # => false
  if res 
      #TODO : encrypt this cookie
      response.set_cookie('ribica_auth', :path=> '/', :httponly => true, :value=>res.id, :expires=>Time.now+100.year)
    res.to_json(except: 'password_digest')
  else
    status 401
    {:error => "email ili lozinka neispravni!"}.to_json
  end
end

get '/user' do
    auth = cookies['ribica_auth']
    if not auth.nil?
        return User.find_by(id: auth).to_json(except: 'password_digest')
    end
end

post '/user' do
  request.body.rewind
  json = request.body.read

  user = User.new()
  user.from_json(json, false)

  if user.save
    {:status => "ok"}.to_json
  else
    status 400
    user.errors.to_json
  end
end