fixed sql query error causing username and password not to work