The Weird and The Wonderful

protected void btnLogin_Click(Object s, EventArgs e)
	{
		bool loginOK = false;
		try
		{
			loginOK = Account.LoginUser(Page, txtUserName.Text, txtPassword.Text);
		}
		catch (Exception ex)
		{
			string error = string.Empty;
			if (ex.Message == "Invalid attempt to read when no data is present.")
			{
				error = "Username not found.";
			}
			else
			{
				error = ex.Message;
			}
			lblMessage.Text = error;
			return;
		}

		if (loginOK == true)
		{
			Response.Redirect("~/Default.aspx");
		}
		else
		{
			lblMessage.Text = "Password does not match.";
		}
	}

public static bool LoginUser(Page page, string uname, string pass)
		{
			bool passwordVerified = false;

			try
			{
				passwordVerified = AccountDB.CheckPassword(uname, pass);
			}
			catch (Exception ex)
			{
				throw;
			}

			if (passwordVerified == true)
			{
				//string roles = "Manager" + "|" + "Administrator";
				string roles = "JobSeeker";

				// Create the authentication ticket
				FormsAuthenticationTicket authTicket = new
					FormsAuthenticationTicket(1,  // version
					uname,      // user name
					DateTime.Now,	// creation
					DateTime.Now.AddMinutes(60),// Expiration
					false,	// Persistent
					roles	// User data
											 );

				string encryptedTicket = FormsAuthentication.Encrypt(authTicket);

				HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);
				page.Response.Cookies.Add(authCookie);

				// Update login date to now
				int userID = AccountDB.GetUserIDByUsername(uname);
				AccountDB.UpdateLoginDate(userID, DateTime.Now);

				return true;
			}
			else
			{
				return false;
			}
		}

public static bool CheckPassword(string username, string password)
		{
			bool passwordMatch = false;
			SqlConnection conn = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString);
			SqlCommand cmd = new SqlCommand("CheckPassword", conn);
			cmd.CommandType = CommandType.StoredProcedure;

			SqlParameter sqlParam = cmd.Parameters.Add("@userName", SqlDbType.VarChar, 255);
			sqlParam.Value = username;
			try
			{
				conn.Open();
				SqlDataReader reader = cmd.ExecuteReader();
				reader.Read();
				string dbPasswordHash = reader.GetString(0);
				string salt = reader.GetString(1);
				reader.Close();

				// Generate hashed password from inputed password and salt
				string hashedPasswordAndSalt = Account.CreatePasswordHash(password, salt);

				// Check the hashed password and salt against the value in DB
				passwordMatch = hashedPasswordAndSalt.Equals(dbPasswordHash);
			}
			catch (Exception ex)
			{
				throw;
			}
			finally
			{
				conn.Close();
			}
			return passwordMatch;
		} // CheckPassword()