function login($user, $pass){
    $conn = connect();
    $query = "SELECT password FROM account WHERE username = '$user' AND password = '$pass'";
    $result = mysqli_query($conn, $query);
    if (mysqli_num_rows($result)=== 1){
        password_verify($pass, "$row[password]");
        session_start();