(notloggedin)
 
  (refas path="db/users/")users(/refas)  
     ##give access to the users dir through a <users> tag

  <trylogin username="<qd>username</qd>" password="<qd>password</qd>">
    <success>
       You are now logged in!
       Welcome <get ref="firstname">
                 <users><qd>username</qd>.xml</users>
               </get>
      [session add="username"]<qd>username</qd>[/session]
      [insertfile]securepage.xml[/insertfile]
    </success>
    <fail>
      <rem>go back to start and do not collect $200</rem>
      [insertfile]login_form.aXML[/insertfile]
    </fail>
  </trylogin>
(/notloggedin)

(loggedin)
 
  <insertfile>securepage.xml</insertfile>
 
(/loggedin)