namespace WebFormsDemo.Controllers
{
    public class LoginController : ApiController
    {
        private EBMSEntities db = new EBMSEntities();

        // GET: api/Login
        [Route("api/Login/Search/{username}/{password}")]
        [ResponseType(typeof(List<AspNetUser>))]
        public bool getUserPassword(string username, string password)
        {
            var hashedPassword = "";
            hashedPassword = Crypto.HashPassword(password);

            var user = (from u in db.AspNetUsers
                                     where u.UserName.Equals(username)
                                     && u.PasswordHash.Equals(hashedPassword)
                                     select u).ToList();

            if (user.Count() != 0)
            {
                return true;
            }
            return false;
        }
    }
}

var doesPasswordMatch = false;

var user = db.AspNetUsers.SingleOrDefault(x => x.UserName == username);
if(user != null)
{
    var hashedPassword = Crypto.HashPassword(password);
    // var doesPasswordMatch = //compare u.PasswordHash with hashedPassword in memory
}
return doesPasswordMatch;

public bool getUserPassword(string username, string password)
{
    return Membership.ValidateUser(username, password);
}