ci-bonfire / Sprint

        // We should only be allowed 1 single other credential to

        // test against.

        if (count($credentials) > 1)

        {

            $this->error = lang('auth.too_many_credentials');

            // If an email is present, log the attempt

            if (! empty($credentials['email']))

            {

                $this->ci->login_model->recordLoginAttempt($credentials['email']);

            }

            return false;

        }

        // Ensure that the fields are allowed validation fields

        if (! in_array(key($credentials), config_item('auth.valid_fields')) )

                                 ->where($credentials)

                                 ->first();

        if (! $user)

        {

            $this->error = lang('auth.invalid_user');

            // If an email is present, log the attempt

            if (! empty($credentials['email']))

            {

                $this->ci->login_model->recordLoginAttempt($credentials['email']);

            }

            return false;

        }

        // Now, try matching the passwords.

        $result =  password_verify($password, $user['password_hash']);