public bool ValidateUser(string username, string password)
        {
            if (String.IsNullOrEmpty(username) || String.IsNullOrEmpty(password))
            {
                return(false);
            }

            var user = _userRepo.FindByUserName(username);

            if (user == null)
            {
                return(false);
            }

            return(AppSecurity.VerifyPasswords(password, user.Password));
        }