validate([ 'email' => ['required', 'email'], 'password' => ['required'], ]); if( !Auth::attempt($validatedAttributes) ) { throw ValidationException::withMessages(['email' => 'credentials do not match']); } request()->session()->regenerate(); return redirect('/admin'); } public function destroy() { Auth::logout(); return redirect('/'); } }