search user by username and password

update user function and search user by username and password