public override bool ValidateUser(string username, string password)
 {
     UserBL userBL = new UserBL();
     string salt = userBL.GetSalt(username);
     if (salt != null && salt != string.Empty)
     {
         password = userBL.hashPassword(password, salt);
         return userBL.ValidateUser(username, password);
     }
     return false;
 }