and in case checkPassword fails?
$userstatus should be set to null?