if (
    req.body &&
    'username' in req.body &&
    'password' in req.body &&
    req.body.username !== '' &&