if(user.getPassword() != null) { password= getPasswordEncryptor().encrypt(user.getPassword()); } else {
try { String storedPassword = rs.getString(ATTR_PASSWORD); if (getPasswordEncryptor().matches(password, storedPassword)) { return getUserByName(user); } else {