bcrypt

  login(req, res) {
    const { username, shaHash } = req.body;
    res.setHeader('Content-Type', 'application/json');
  
    User.findOne({ username, verified: true }, (err, user) => {
      if (!user) {
        console.log('No user with that username found or not verified');
        res.status(500);
        res.end();
        return;
      }
  
      console.log('user', user);
      bcrypt.compare(shaHash, user.password, (err, isMatch) => {
        if (err) {
          console.log('err', err);
          res.status(500);
          res.end();
          return;
        }

        if (isMatch) {
          res.status(200);
          res.end(JSON.stringify(user));
        } else {
          res.status(500);
          res.end();
        }
      });
    });
  }