next, implement bcrypt and password hashing.  
You might have several users with a name of "Dom" .  It is better to use a unique identifier like :email to find a user. 

Also, use find() instead of where() because find only returns the first value that matches and since email is unique you won't need to use .take