String sql ="select * from usuarios where username=? and password=?";