Are you saying he should have stepped through the framework's authentication implementation in the debugger? The bug was in the configuration, if I understand c

Are you saying he should have stepped through the framework's authentication implementation in the debugger? The bug was in the configuration, if I understand correctly, so there wasn't much to step through there.