def login(username, password):
    user = db[username] #这里的user是实例,拥有三个属性
    return user.password == get_md5(password + user.salt)