if session[:user] = User.authenticate(params[:user][:login], params[:user][:password])
What is this line of code supposed to do? The syntax seems to me completely wrong, hence Rails blowing on you.
Keep up to date with Rails on Twitter and This Week in Rails
Policies: Conduct, License, Maintenance, Security, Trademarks