Login System..Fejl

Er der nogen der kan se en fejl i dette her?
Det virker ikke.
Der skal btw ikke være nogen database angivelse, jeg bruger global.

<%
function fixSring(strInput)
if len(strInput) > 0 then
    outString = replace(strInput,"'","")
        fixSring = outString
else
    fixSring = strInput
end if
end function

if Request.ServerVariables("REQUEST_METHOD") = "POST" then
    Set Conn = Server.CreateObject("ADODB.Connection")
    Set rs = Server.CreateObject("ADODB.RecordSet")

    username = fixSring(Request.Form("username"))
    password = fixSring(Request.Form("password"))
   
    Conn.Open Application("Provider")
    strSQL= "SELECT * FROM users WHERE (username = '" & username & "' AND password='" & password & "');"
    Set rs = Conn.Execute (strSQL)

    if not rs.EOF then
          if (username = rs("username")) then
                  session("loginOK") = "jeps"
                session("username") = rs("username")
            session("time") = Now()
          end if
      end if

rs.Close
Conn.Close
Set rs = Nothing
Set Conn = Nothing
end if

if session("loginOK") <> "jeps" THEN
%>
<form method="post" name="adminlogin">
    Brugernavn:<br><input class="bar" size="9" name="username"><br>
      Password:<br><input class="bar" type="password" name="password"><br>
    <input class="knap" type="submit" value="Login" name="Action">
</form>
<%
else
Response.write("<center>Du er logget p&aring; d.:<br>")
Response.write(Session("time") & "<br>")
Response.write("<center>som:<br>")
Response.write(Session("username") & "<br>")

Response.write("<a href='logout.asp'><b>Logout</b></a></center>")
End If
%>