interact with https://apiadv.sintia.com.ar/Help/Api/POST-Ratificacion-Login

[HttpPost]
[Route("Login")]
public IHttpActionResult Login(Login login)
{
    try
    {
        using (SqlConnection conn = new SqlConnection(ConfigurationManager.ConnectionStrings["SINTIA"].ConnectionString))
        {
            var query = "select * from [dbo].[User] where [UserName] = @username and [Password] = @password";
            var cmd = new SqlCommand(query, conn);
            cmd.Parameters.AddWithValue("username", login.UserName);
            cmd.Parameters.AddWithValue("password", login.Password);

            conn.Open();
            var reader = cmd.ExecuteReader();
            if (reader.HasRows)
            {
                reader.Read();
                var accesstoken = Guid.NewGuid();
                var query2 = "update [dbo].[User] set [AccessToken] = @accesstoken, [LastLogin] = getdate() where [UserName] = @username and [Password] = @password";
                var cmd2 =