public string Login(string Username, string Password) { Account account = _accountRepository.GetAccountByUsername(Username); if (account != null) { //password matches if (account.Password == Password) { // _userSession.CurrentUser = account; //Account changed to SSPSTAFF. _userSession.LoggedIn = true; _redirector.GoToDefault(_userSession.CurrentUser.SSPStaffID); } return("Password did not match"); } return("Such account does not exist"); }