Sign in

For the site's editors.

The whole sign-in

set users to ask database "select name, password from users where name = ?" with name
if count of users is 1 and form "password" matches password of first of users
  remember "user" as name
  go to "/admin"
otherwise
  set problem to "That name and password do not match."
end

Passwords are stored as hash of the password, a salted one-way scramble. The sign-in is a signed cookie: remember writes it, remembered reads it, forget everything is sign out.