Even easier.
I have attached an example of how I would do it.
This is by no means exhaustive as in practice you would want to add password masking, deny access after failed attempts etc but that is beyond what you was asking form.
You can try the following logins:
Username: Carl Law...