public HttpResponseMessage LoginAdmin(string username, string password) { if (tokenManager.CheckUser(username, password)) { if (tokenManager.CheckAdmin(username, password)) { return(Request.CreateResponse(HttpStatusCode.OK, JwtManager.GenerateToken(username))); } else { return(Request.CreateResponse(HttpStatusCode.Unauthorized, "You are not admin!!! ")); } } else { return(Request.CreateErrorResponse(HttpStatusCode.Unauthorized, "Invalid Id or password!!!")); } }