$http({
        url: rootUrl + "User/GetUser",//'@Url.Action("GetUser","User")',
        method: 'POST',
        params: {
            uname: $scope.username,
            pword: $scope.pass
        }
    }).then(function (response) {
        alert('success!');
        $scope.user = response.data;
        if ($scope.user.Fullname != undefined) {
            $http({
                url: rootUrl + "Session/Set",
                method: "POST",
                data: {
                    "key": "curr_user",
                    "value": JSON.stringify($scope.user)
                }
            });

            window.location.href = rootUrl + 'Product/List/';

        } else {
            //invalid login
            $("input[name='password']").select();
            $("#validation-summary").html("Wrong email or password.");
            $scope.invalidlogin = true;
            $(btnLogin).removeClass('disabled');
            $(btnLogin).text("Submit");

        }

[HttpPost]
    public JsonResult GetUser(string uname, string pword)
    {
        JBManager manager = null;

        using (SE_Context db = new SE_Context())
        {
            try
            {
                manager = db.Managers
                    .Include("Transactions.Items")
                    .Where(m => m.Username == uname && m.Password == pword)
                    .FirstOrDefault();
                //At this point, manager has the desired data
                return Json(manager, JsonRequestBehavior.AllowGet);
            }
            catch (Exception ex)
            {
                return null;
            }
        }
    }