I would suggest taking a look at Ryan Bates screencast about restful authentication (http://railscasts.com/episodes/67), write a simple application or two using restful authentication, and then walk through the code to see how it all works. IIRC, it has support for doing just what you asked.
–wpd
