Erro em Autenticar user no BD

package doman; 
import java.sql.*; 
import java.sql.Connection; 
import java.sql.PreparedStatement; 
import java.sql.ResultSet; 
import java.sql.SQLException; 
import java.util.*; 
import org.mentawai.core.*; 
import org.mentawai.action.*; 
import org.mentawai.message.*; 
import dataBase.*; 

public class LoginAction extends BaseLoginAction { 
ConexaoDB cnt = new ConexaoDB(); 
Connection c = cnt.getConn(); 
PreparedStatement stmt = null; 
ResultSet rset = null; 
FuncionarioDB usuario = null; 

private static final String USERNAME_PASSWORD_WRONG_ERROR = "1"; 

public String execute() throws Exception { 
   String user = input.getStringValue("username"); 
   String pass = input.getStringValue("password"); 

   if (user == null || user.trim().equals("")) { 
      addError(USERNAME_PASSWORD_WRONG_ERROR); 
      return ERROR; 
   } 
   if (pass == null || pass.trim().equals("")) { 
      addError(USERNAME_PASSWORD_WRONG_ERROR); 
      return ERROR; 
   } 

   try { 
      String query = "select nomefuncionario, login, senhafuncionario " + 
"from cadfuncionario " + 
"where login ='" + user + "' " + 
"and senhafuncionario = '" + pass + "'"; 

      Statement s = c.createStatement(); 
      s.execute (query); 

      if (rset.next()) { 
         usuario = new FuncionarioDB(); 
         usuario.setNome(rset.getString("nomefuncionario")); 
         usuario.setLogin(rset.getString("login")); 
         usuario.setSenha(rset.getString("senhafuncionario")); 
      } 

      if(usuario==null||!usuario.getSenha().equals(pass)){ 
         setUserSession(user); 
         setUserGroups("users"); 
         return SUCCESS; 
      } 
   } catch(SQLException e) { 
      throw new ActionException(e); 
   } finally { 
      try { if (rset != null) rset.close(); } catch(Exception e) { } 
      try { if (stmt != null) stmt.close(); } catch(Exception e) { } 
   } 
   addError(USERNAME_PASSWORD_WRONG_ERROR); 
   return ERROR; 
   } 
}