Fixes #12 : use false result check at stmt->fetchObject() to handle not found data ( auth failure )

Author: samsonasik

src/UserRepository/PdoDatabase.php

@@ -49,13 +49,13 @@ public function authenticate(string $credential, string $password = null) : ?Use
 
         $stmt = $this->pdo->prepare($sql);
         $stmt->bindParam(':username', $credential);
+        $stmt->execute();
 
-        if (! $stmt->execute()) {
+        $result = $stmt->fetchObject();
+        if (! $result) {
             return null;
         }
 
-        $result = $stmt->fetchObject();
-
         return password_verify($password, $result->{$this->config['field']['password']})
             ? $this->generateUser($credential, $this->getRolesFromUser($credential))
             : null;