public bool ValidateUser(string username, string password)
{
if (String.IsNullOrEmpty(username) || String.IsNullOrEmpty(password))
{
return(false);
}
var user = _userRepo.FindByUserName(username);
if (user == null)
{
return(false);
}
return(AppSecurity.VerifyPasswords(password, user.Password));
}