Login Action Method with HttpPost

[HttpPost]
public ActionResult Login(LoginModel login)
{
        string message = "";
        bool status = false;
        //check UserName and password form our database here
        if (login.UserName == "Admin" && login.Password == "12345") // Admin as user name and 12345 as Password
        {
        status = true;
        message = "Two Factor Authentication Verification";
        Session["UserName"] = login.UserName;
        //Two Factor Authentication Setup
        TwoFactorAuthenticator TwoFacAuth = new TwoFactorAuthenticator();
        string UserUniqueKey = (login.UserName + key); 
        Session["UserUniqueKey"] = UserUniqueKey;
        var setupInfo = TwoFacAuth.GenerateSetupCode("Dot Net Detail", login.UserName, UserUniqueKey, 300, 300);
        ViewBag.BarcodeImageUrl = setupInfo.QrCodeSetupImageUrl;
        ViewBag.SetupCode = setupInfo.ManualEntryKey;
        }
        else
        {
          message = "Please Enter the Valid Credential!";
        }
        ViewBag.Message = message;
        ViewBag.Status = status;
        return View();
}