public InMemoryUser Login(string userName, string password, string userTimezoneOffset) { var shaPassword = AuthUtils.GetSha1HashData(password); var md5Password = AuthUtils.GetHashData(password, SHA256.Create()); var dbUser = new SWDBHibernateDAO().FindSingleByQuery <User>(LoginQuery, userName); if (dbUser == null || !MatchPassword(dbUser, password)) { return(null); } return(UserFound(dbUser, userTimezoneOffset)); }