public User Authenticate(string username, string password, byte[] salt) { try { var user = _context.Users.SingleOrDefault(user => user.Username == username && user.HashedPassword == _hashHelper.GenerateHash(password, salt)); return(user); } catch { throw new SystemException("could not authenticate user"); } }