Update index.php

If no session, grab the username and password from _POST.
If the username and password exist, get the list of users.