goja-web/src/main/java/goja/security/goja/SecurityKit.java
public static <T extends Model> boolean login(T user, String password, boolean remember
            , HttpServletRequest request, HttpServletResponse response) {
        boolean matcher =
                SecurityKit.checkPassword(user.getStr("salt"), user.getStr("password"), password);
        if (matcher) {
            SecurityKit.setLoginMember(request, response, user, remember);
        }
        return matcher;
    }
public static <T extends Model> boolean login(T user, String password, boolean remember
            , HttpServletRequest request, HttpServletResponse response) {
        boolean matcher =
                SecurityKit.checkPassword(user.getStr("salt"), user.getStr("password"), password);
        if (matcher) {
            SecurityKit.setLoginMember(request, response, user, remember);
        }
        return matcher;
    }
Check the user's password, and execute the login request

@param user     user.
@param password password.
@param remember has remember.
@param request  request.
@param response http response.
@param <T>      User type.
@return True login Success.