Update login.php

corrected: $password = $phpass->HashPassword($_POST['password'])
to become: $password = $phpass->HashPassword($_POST['password']);