PasswordCredential password = (PasswordCredential) credentials.getCredential();
String hashedPassword = securityUtil.hash(u, password.getValue());
if (hashedPassword.equals(u.getPassword())) {
loginEvent.fire(u);
u.setDateLastLogin(new Date());
setUser(new SimpleUser(u.getContact().getEmailAddress()));
setStatus(AuthenticationStatus.SUCCESS);
eventLog.fire(new EventLog(u, "User Logged In"));
} else {
messages.info("Incorrect Password");
setStatus(AuthenticationStatus.FAILURE);