leap_web.git/users, branch 0.2.2

use /login instead of /sessions/new and test successful login

2013-09-04T08:46:15+00:00

fix login form - use api session url

2013-09-04T07:48:30+00:00

There's no non api sessions resource anymore.

Merge pull request #73 from azul/bugfix/3623-teardown-test-data-properly

2013-09-03T17:48:13+00:00

Bugfix/3623 teardown test data properly

Merge pull request #75 from azul/feature/token-expiry

2013-09-03T17:43:34+00:00

Token expiry

Merge pull request #76 from azul/feature/3600-visual-feedback-on-failed-signup

2013-09-03T17:38:39+00:00

Ensure json requests get json error response on failure

clearify usage of V1::UsersController#index for autocomplete

2013-09-03T09:08:55+00:00

[skip ci]

use the login logout named route instead of sessions resource

2013-09-03T09:06:20+00:00

The main part of the sessions resource now lives in the API. the two named routes are just fine for what is left.

remove email aliases controller - we don't use it anymore

2013-09-03T08:50:00+00:00

Cleanup sessions controller - webapp logs in through the api.

2013-09-03T08:49:00+00:00

So the #create and #update actions were not needed anymore. Also removed the tests

Account: Composition to handle User and its identities

2013-09-03T06:54:25+00:00

We have a lot of things that act upon a user record and one or more of it's identities at the same time:
* Sing up: Create a user and it's initial identity
* Rename:  Change the username and create a new identity, turn old into an alias
* Cancel Account: Remove user and all their identities.

In order to keep the User and Identity behaviour isolated but still have a this logic represented in a sinle place the Account model deals with all these things.

We could have overwritten the User#create, User#update and User#destroy methods instead. But then we would always create identities, even if we only need a user (for example in tests).