@RequestMapping(value = "/signin", method = RequestMethod.POST)
	public String signinForm(@ModelAttribute User user, Model model, HttpSession session) {
		String userPassword = user.getPassword();
		String dbPassword = Database.getPassword(user.getUsername());
		String username = user.getUsername();

		if(userPassword == null || dbPassword == null || username == null) {
			return "signin";
		}
		
		boolean isCorrectPassword = BCrypt.checkpw(userPassword, dbPassword);

		if(isCorrectPassword) {
			session.setAttribute("username", username);
			return home(session, model);
		} else {
			return "signin";
		}
	}