logger.debug("user returned from userList is null");
}
return false; // user doesn't exist.
}
if ( ! user.authenticate( msgContext.getPassword() ) )
{
if (logger.isDebugEnabled()) {
logger.debug("authenticate failed");
}
return false; // password doesn't match.