```

event.preventDefault();

varusername=document.getElementById('username').value;

varpassword=document.getElementById('password').value;

xhr.open('POST','/login',true);

xhr.setRequestHeader('Content-Type','application/x-www-form-urlencoded');

xhr.onreadystatechange=function(){

if(xhr.readyState===4