flox/backend/app/Http/Controllers/UserController.php

<?php

  namespace App\Http\Controllers;

  use Illuminate\Contracts\Auth\Guard;
  use Illuminate\Support\Facades\Input;

  class UserController {

    private $auth;

    /**
     * Create an instance for 'auth'.
     *
     * @param Guard $auth
     */
    public function __construct(Guard $auth)
    {
      $this->auth = $auth;
    }

    /**
     * Login user and return correct response.
     *
     * @return \Illuminate\Contracts\Routing\ResponseFactory|\Symfony\Component\HttpFoundation\Response
     */
    public function login()
    {
      $username = Input::get('username');
      $password = Input::get('password');

      if($this->auth->attempt(['username' => $username, 'password' => $password], true)) {
        return response('Success', 200);
      }

      return response('Unauthorized', 401);
    }

    /**
     * Logout user and redirect to home.
     *
     * @return \Illuminate\Http\RedirectResponse|\Illuminate\Routing\Redirector
     */
    public function logout()
    {
      $this->auth->logout();

      return redirect('/');
    }
  }