update server file to check username and password in backend