	var ajaxServletUrl = "http://" + location.host + "/ajax/AjaxExecuter/";
	var req = getXMLHttpRequest();
	
	// Аутентификация
	function sendAuthUser(log, pass)
	{	
		params = "command=auth&login=" + log + "&pass=" + pass;

		if(req != null)
		{
			req.open("POST", ajaxServletUrl, true);
			req.setRequestHeader("Content-Type", "application/x-www-form-urlencoded;charset=UTF-8");  
			req.onreadystatechange = getReadyStateHandler(req, recAuthUser);
			req.send(params);
		}
	}

	function recAuthUser(xml)
	{
		//xml = req.responseXML;
		resultCode = xml.getElementsByTagName("resultCode")[0].firstChild.data;

		if(resultCode == 0)
		{
			href = xml.getElementsByTagName("href")[0].firstChild.data;
			location.replace("http://" + location.host + '/private/' + href + '/orders/st1/');
		}
		else if (resultCode == 5)
			alert('Введено неверное имя пользователя или пароль');		
		else
			alert('Не удалось авторизоваться');	
	}
	
	// Выход
	function sendCloseAuth()
	{	
		params = "command=closeauth"
				
		if(req != null)
		{
			req.open("POST", ajaxServletUrl, true);
			req.setRequestHeader("Content-Type", "application/x-www-form-urlencoded;charset=UTF-8");  
			req.onreadystatechange = getReadyStateHandler(req, recCloseAuth);
			req.send(params);
		}
	}

	function recCloseAuth(xml)
	{
		//xml = req.responseXML;
		resultCode = xml.getElementsByTagName("resultCode")[0].firstChild.data;

		location.replace("http://" + location.host + '/auth/');
	}