public async Task <User> Login(string username, string password) { var user = await _context.Users.FirstOrDefaultAsync(u => u.Username == username.ToLower()); if (user == null) { return(null); } if (!Cripto.VerifyPasswordHash(password, user.PasswordHash, user.PasswordSalt)) { return(null); } return(user); }