my $username = param "user";
     my $password = param "pass";