[AllowAnonymous]
        public ActionResult Login(string username, string password)
        {
            var userRepository = new UserRepository();
            var lowerUsername = username.ToLower();
            var encryptedPassword = CreatePasswordHash(password);

            if (userRepository.Exists(lowerUsername, encryptedPassword))
            {
                FormsAuthentication.SetAuthCookie(lowerUsername, false);
                return RedirectToAction("Index", "Profile", new RouteValueDictionary(new { lowerUsername }));
            }
            return RedirectToAction("index", "Home");
        }