Changes
just removed the unnecessary session_start() just because you are including the Database.php file and
it already has a session_start().

And how many times should I say you to check your variable names?
you sent 'usr' and 'pwd' from index.html and in signup.php you were looking for
'username' and 'password'