String username = request.getParameter("username");
String password = request.getParameter("password");

User u = new User(username, password);

OR

User u = new User(request.getParameter("username"), request.getParameter("password));