<?php

...

$username = $_POST['username'];
$password = $_POST['password'];

$user = User::find('username', $username);
if($user->exists() && $user->password() == $password) {
    $user->loggedIn(true);
}


?>