change sql and login.js