Confirm that that  password hash matches the database password hash, and that the user is still active in authCheckSession