Check the given credentials, and return a relevant object if accepted.
Returning null indicates credentials were not accepted
@param user - the user name provided by the user's agent
@param password - the password provided by the user's agent
@return - if credentials are accepted, some object to attach to the Auth object.otherwise null