Maybe it works now?

routes/login.js

@@ -24,6 +24,7 @@ router.post('/', (req, res) => {
 	console.log(req.body)
 	if (!username || !password) return res.status(400).render('login', { error: 'Username and password are required.' });
 	db.query('SELECT * FROM users WHERE username = ?', [username]).then(async (user) => {
+		user = user[0];
 		console.log(user);
 		//res.send("Test")
 		// This is the original code, commented out for debugging