validate([ 'email'=>'required|email', 'password'=>'required' ]); if(Auth::attempt($attributes)) { session()->regenerate(); return redirect('dashboard')->with(['success'=>'You are logged in.']); } else{ return back()->withErrors(['email'=>'Email or password invalid.']); } } public function destroy() { Auth::logout(); return redirect('/login')->with(['success'=>'You\'ve been logged out.']); } }