While we haven't looked at validation yet, knowing the earlier "catch" will be very helpful while handling data interactions. We should bear it in mind when building our form handling actions, and use the correct methods wherever possible so that we don't have to rewrite them later.
When a user logs in, we want to update the lastLogin date. We don't need any validation as we are setting the single field ourselves on the server, and we don't need the object returned from the database. We also know we are going to get the correct instance as our query object will be for the unique _id field, so we can use the
update() method.
User login is currently handled by the doLogin function in routes/user.js. The section of the function that handles a successful login looks like the following:
req.session.user = { "name" : user.name, "email": user.email, "_id": user._id };
req.session.loggedIn = true;
console.log('Logged in user: ' + user);
res.redirect...