Fixed issue with incorrect firm name being assigned to user.
Enabled verifying of password.
Changed the deserialization to use userRepository for retreiving user.
Client changes to handle invalid user credentials.
Added tests for invalid password.