function sendLogin(user, pass, remember, sendto) {

	http.open('POST', '/login/');
	http.onreadystatechange = handleLoginResponse;
	http.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
	var reqparam = 'act=login&user=' + user + '&pass=' + pass + '&remember=' + remember + '&sendto=' + sendto;
	http.send(reqparam);
}

function handleLoginResponse() {
     if(http.readyState == 4){
	if(http.status == 200) {
          var responseXML = http.responseXML;
	  var success = responseXML.getElementsByTagName('success')[0].firstChild.data;
	  if(success == 1) {
	    document.location.href = responseXML.getElementsByTagName('url')[0].firstChild.data;
	  } else {
	    ReplaceText('login_error', responseXML.getElementsByTagName('error')[0].firstChild.data);
	  }
        } else {
	  AJAXError('Login returned ' + http.status);
	}
     }
}

function sendLogout(userid) {
	http.open('POST', '/login/');
	http.onreadystatechange = handleLogoutResponse;
        http.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
	var reqparam = 'act=logout&userid=' + userid;
        http.send(reqparam);
}

function handleLogoutResponse() {
     if(http.readyState == 4){
	if(http.status == 200) {
          var responseXML = http.responseXML;
	  document.location.href = responseXML.getElementsByTagName('url')[0].firstChild.data;
        } else {
	  AJAXError('Login returned ' + http.status);
	}
     }
}