login.cs

public ActionResult Login(string username, string password) {
 if(username != “user” || password != “123”) {
  ModelState.AddError(“username or password incorrect”);
  return View();
 }

  return new LoginResult(username); //I typically pass the actual user into the login result
}