**CLIENT SIDE**:

<script>
    function EncryptPass() {
        var pass = $('#pwd').val();
        var encrypt = CryptoJS.AES.**encrypt**(pass, 'David&&Rotem');
        $('#pwd').val(encrypt);
        console.log(encrypt);
    }
</script>

**SERVER SIDE:**
router.post('/', async (req, res) => {
    let bytes=AES.**decrypt**(req.body.password,'David&&Rotem');
    let pass=bytes.toString(CryptoJS.enc.Utf8);
    let user;
    user=await User.findOne({username: req.body.username}).exec();
    if(user==null || user.password!=pass)
       {
            console.log(req.body.password);
            //console.log(pass);
            res.redirect('/login')
        }
    else{
        //console.log("user not found or password aren't correct");
        req.login(user.username,function(err) {
            res.redirect('/')
        })
    }
});