login for the user (backend)

[AmrAymanKhalil505]

white box test.

Severity(High)

Reported by Amr Ayman Elsayed

Description :
the login doesn't save the one who logged in the session and just says it logged in while it doesn't
also, the login sends back to the user a json file with the password which should not happen

Steps to reproduce the issue:
1- sign up
localhost:3000/signup
{

"Username":"amro5",
"Password":"amrayman"

}
localhost:3000/login
{

"Username":"amro5",
"Password":"amrayman"

}

there is no backend method that tests that i am logged in or not so just look at the code they don't test the session

expected results:
adding the user in the session and not getting the password in a json