code: public static BaseUserInfo doAuthentication(String name,String password){
  		BaseUserInfo userInfo = getInstance().decisionProvider.validateUser(name, password);
  		
  		UserSession session = getCurrentSession(false);
  		session.update(userInfo, getInstance().decisionProvider.sessionExpireIn());
  		
  		if(getInstance().decisionProvider.multiPointEnable()){
  			UserSession otherSession = getInstance().sessionManager.getLoginSessionByUserId(userInfo.getId());
  			if(otherSession != null && !otherSession.getSessionId().equals(session.getSessionId())){
  				getInstance().sessionManager.removeLoginSession(otherSession.getSessionId());
  			}
  		}
  		getInstance().sessionManager.storgeLoginSession(session);
  		getInstance().resourceManager.getUserPermissionCodes(userInfo.getId());
  		
  		return userInfo;
  	}
docs: 认证
  @param name
  @param password