{
User user = ObjectContext.get().findOne(User.class, AWUtil.map("name", _userName));
if (user == null) {
recordValidationError("username", localizedJavaString(1, "Unknown user" /* */), _userName);
} else {
if (user.matchingPassword(_password)) {
User.bindUserToSession(user, session());
MetaNavTabBar.invalidateState(session());
return _callback.proceed(requestContext());
}
recordValidationError("password", localizedJavaString(2, "Invalid credentials" /* */), null);