Why are you fetching what I assume is a list of users from your DB, and then ignoring it when you have checked if there are any in there?
if (s.Any())
Checks if any users match, but you then create an empty user that is unrelated to any of them, and set it's firstname to an existing label that has nothing at all to do with the users you just looked for...
Perhaps you want to start with
s
and use that information as a basis for identifying your users?
And please, don't do it like that! Never store passwords in clear text - it is a major security risk. There is some information on how to do it here:
Password Storage: How to do it.[
^]