User Login (process_login)

rubyonrails-talk
1

I would suggest taking a look at some authentication plugins, even if you don't actually end up using one of them.

I personally like the restful_authentication plugin:

http://agilewebdevelopment.com/plugins/restful_authentication