//check if user exists
        string query = string.Format("SELECT COUNT(*) FROM users WHERE name = '{0}'", name);
        command.CommandText = query;

         try
        {
            conn.Open();
            int amountOfUsers = (int)command.ExecuteScalar();

            if(amountOfUsers == 1)
            {
                query = string.Format("SELECT password FROM users WHERE name = '{0}'",name);
                  command.CommandText = query;
                string dbPassword = command.ExecuteScalar().ToString();

                if(dbPassword == password)
                {
                    query = string.Format("SELECT email, type FROM users WHERE name ='{0}'",name);
                    command.CommandText = query;

                    SqlDataReader reader = command.ExecuteReader();
                    User user = null;

                    while (reader.Read())
                    {
                        string email = reader.GetString(0);
                        string type = reader.GetString(1);



                        user = new User(name, password, email, type,"true","true","true");
                    }
                    return user;
                }
                else
                {
                    return null;
                }
            }
            else
            {
                return null;
            }


        }
         finally
         {
             conn.Close();
         }