def login(username, password):
    if username in db.keys():
        user = db[username]
        return user.password == hmac_md5(user.key, password)
    return False