async function getPassword(email) {
  const queryString = "SELECT password FROM spieler WHERE email = ?"

  const con = getConnection()

  return password = await con.query(queryString, [email], (err, result, flds) => {
    console.log("password is: " + result[0].password)
  })
}

app.post('/api/login', validatePayloadMiddleware, (req, res) => {

  const email = req.body.email
  const pw = req.body.pw

  var username = ""
  var userData = {}

  if (email != null) {

    const queryString = "SELECT * FROM spieler WHERE email = ?"

    const con = getConnection()

    con.query(queryString, [email], (err, result, flds) => {
      if(err) {
        res.status(404).send({
          errorMessage: 'No User Found'
        })
      }

      if (result.length > 0) {
        const pw = getPassword(email)
        username = result[0].username
        console.log("++++ " + username)
      }
    })

    req.session.user = userData

    res.status(200).send({
      user : userData
    })
  } else {
    res.status(403).send({
      errorMessage: 'Permission denied'
    })
  }
})