In case you are using the older algorithm associated with legacy ASP.NET to hash your passwords, you may have to do:

return result == PasswordVerificationResult.Success || result == PasswordVerificationResult.SuccessRehashNeeded;