<% if( request.getParameter("submit") != null && request.getParameter("user").equals("cysun") && request.getParameter("pass").equals("abcd") ) { session.setAttribute("user", "cysun"); response.sendRedirect("Members.jsp"); } else { %>

username:
password:

<% } %>