if (!SecurityUtilities.CheckCredentials(username, password))
            {
                LogUtilities.LogSecurityViolation(
                    username,
                    "LOGIN",
                    WebRequestService.UserHostAddress);
                return null;
            }

            return BaselineAdministration.GetLoginData(username);