public bool ValidateUser(string username, string password) { if (String.IsNullOrEmpty(username) || String.IsNullOrEmpty(password)) { return(false); } var user = _userRepo.FindByUserName(username); if (user == null) { return(false); } return(AppSecurity.VerifyPasswords(password, user.Password)); }