protected void loginButton_Click(object sender, EventArgs e)
        {
            int loginID = 0;
            DataAccess DA = new DataAccess();

            try
            {
                // create the parameterized command and execute it
                SqlCommand cmd = new SqlCommand("select LoginID, Login, Password from Login where Login = @Login and Password = @Password");
                cmd.Parameters.AddWithValue("@Login", userIDTextBox.Text);
                cmd.Parameters.AddWithValue("@Password", passwordTextBox.Text);

                SqlDataReader reader = DA.GetDataReader(cmd);

                if (reader != null)
                {
                    // if the database returned no rows then we do not have a valid input
                    if (reader.HasRows == false)
                    {
                        loginFailedLabel.Text = "Login Failed.";
                        reader.Close();
                        DA.CloseConnection();
                        return;
                    }
                    else
                    {
                        // grab the loginID
                        reader.Read();
                        loginID = Int32.Parse(reader["LoginID"].ToString());

                        reader.Close();
                    }
                }
                else
                {
                    loginFailedLabel.Text = DA.WriteError();
                    return;
                }

                // user is authenticated, set the PartnerID session variable
                cmd = new SqlCommand("select PartnerID from Partner where LoginID = @LoginID");
                cmd.Parameters.Add("LoginID", loginID);
                reader = DA.GetDataReader(cmd);

                if (reader != null)
                {
                    reader.Read();
                    Session["PartnerID"] = Int32.Parse(reader["PartnerID"].ToString());

                    reader.Close();
                    DA.CloseConnection();

                }
                else
                {
                    loginFailedLabel.Text = DA.WriteError();
                    return;
                }

            }
            catch (SqlException exception)
            {
                loginFailedLabel.Text = DA.WriteError("REACH.Master.cs: Line: " + exception.LineNumber + ": " + exception.ToString(), true);
                return;
            }

DataAccess DA = new DataAccess();
SqlDataReader reader = null;
SqlCommand cmd = new SqlCommand("select"
    + " a.LoginID, a.Login, a.Password, b.PartnerID"
    + " from Login a"
    + " left outer join Partner b on a.LoginID=b.LoginID"
    + " where a.Login = @Login"
    + " and a.Password = @Password"
);
cmd.Parameters.AddWithValue("@Login", userIDTextBox.Text);
cmd.Parameters.AddWithValue("@Password", passwordTextBox.Text);

try {
    //I'm assuming DA.GetDataReader opens the connection,
    // otherwise you wont get very far.
    reader = DA.GetDataReader(cmd);
    if (reader.read()) {
        Session["LoginID"] = Int32.Parse(reader["LoginID"].ToString());
        Session["PartnerID"] = Int32.Parse(reader["PartnerID"].ToString());
    } else {
        loginFailedLabel.Text = "Login Failed.";
        //loginFailedLabel.Text = DA.WriteError();
    }
} catch (SqlException exception) {
    loginFailedLabel.Text = DA.WriteError("REACH.Master.cs: Line: " + exception.LineNumber + ": " + exception.ToString(), true);
    return;
} finally {
    if (reader!=null) { reader.Close(); }
    DA.CloseConnection();
}