public async Task <User> Login(string username, string password)
{
var user = await _context.Users.FirstOrDefaultAsync(u => u.Username == username.ToLower());
if (user == null)
{
return(null);
}
if (!Cripto.VerifyPasswordHash(password, user.PasswordHash, user.PasswordSalt))
{
return(null);
}
return(user);
}
