if ($username and $password) {
    if ($c->authenticate({ username => $username,
                               password => $password  } )) {
            
            $c->response->redirect($c->uri_for_action('/profile'));
            return;
        } else {
            # Set an error message
            $c->stash(error_msg => "Bad username or password.");
        }
}