Also, there was a bit of a typo on my behalf:

($user eq $q->param('ueq &encrypt_pass)
[download]

Should have been:

($user eq $q->param('username') && $pass eq &encrypt_pass)
[download]