sub _login {
    
    ##
    ## check login credentials and load user profile
    ##
    
    my $self = shift;
    my ($username, $password) = @_;
    
    # allow only the guest user, for real applications use a subclass
#    if ( ($username eq 'guest') && ( $password eq 'guest' ) ) {
#        $self->_info("User '$username' logged in");
#        $self->{userid} = "guest";
#        $self->_loadProfile($self->{userid});
#        return 1;
#    }

	 #  load my Active Directory object
	 my $ad_handle = com::corp::ActiveDirectory->new('WIN');	

	 if ( $ad_handle->login($username,$password) ) {

        $self->_info("User '$username' logged in");
        $self->{userid} = "guest";

		#  send user info via ->getUserInfo hash_ref
		$self->_loadProfile($self->{userid}, $ad_handle->getUserInfo);

		return 1;
	 }

  
    return 0;
}

###########################################################