String password = (String) PropertyUtils.getSimpleProperty(form, "password");
request.setAttribute("username", username);
UserManager userManager = UserManager.getInstance();
boolean validPassword = false;
try {
validPassword = userManager.getUser(username).authenticate(password);
} catch (EntityNotFoundException e) {
validPassword = false;
}
if (!validPassword) {
log.debug("bad password");