public HttpResponseMessage Login(HttpRequestMessage request, tbStaff login) { tbStaff result = staffRepo.GetWithoutTracking().Where(a => a.Username == login.Username && a.Password == login.Password).FirstOrDefault(); return(request.CreateResponse <tbStaff>(HttpStatusCode.OK, result)); }