310c310
<             pstmt.setString(1, username);
---
>             pstmt.setString(2, username);
317c317
<             pstmt.setString(2, password);
---
>             pstmt.setString(1, password);
319c319
<             rs = pstmt.executeQuery();
---
>             pstmt.executeUpdate();