Merge remote-tracking branch 'origin/dev-mysql' into dev-mysql

src/main/java/com/uas/platform/b2c/common/account/controller/SecurityController.java

@@ -210,6 +210,9 @@ public class SecurityController {
 				SSOHelper.setSSOCookie(request, response, tk, true);
 				User user = getUserByToken(tk);
 				if (user != null) {
+					if (!user.getUserPwd().equals(FlexJsonUtils.fromJson(tk.getData(), com.uas.account.entity.User.class).getPassword())){
+						return "successCallback({success:'0'})";
+					}
 					user.setIp(AgentUtils.getIp(request));
 					request.getSession().setAttribute("user", user);
 					SystemSession.setUser(user);