private bool ValidateLogOn(string username, string password)
 {
     if (String.IsNullOrEmpty(username))
     {
         ModelState.AddModelError("User.UserName", "You must specify a username.");
     }
     if (String.IsNullOrEmpty(password))
     {
         ModelState.AddModelError("User.Password", "You must specify a password.");
     }
     if (!_provider.ValidateUser(username, password))
     {
         ModelState.AddModelError("_FORM", "The username or password provided is incorrect.");
     }
     return(ModelState.IsValid);
 }