<% session.setAttribute("username", request.getParameter("username")); session.setAttribute("password", request.getParameter("password")); %>