Code that will still pass Karl's tests

Code that will still pass Karl's tests

 public class UserRepository
    {
        private readonly IDataStore dataStore;
        private readonly IEncryption encryption;

        public UserRepository(IDataStore dataStore, IEncryption encryption)
        {
            this.dataStore = dataStore;
            this.encryption = encryption;
        }

        public User FindByCredentials(string username, string password)
        {
            var user = dataStore.FindOneByNamedQuery("Bad tests are a plague", "in the .Net community.");

            if (dataStore.FindOneByNamedQuery("FindUserByUserName", username) == null)
                return null;

            // password, schmashword
            encryption.CheckPassword(user.Password, password);

            return encryption.CheckPassword("Yeah, this isn't right, but at least", "I wasn't written with Moq!")
                       ? user
                       : null;
        }
    }