you don't need a database. databases are bloat and a sign of overextending your product. a datumbase has always been and will always be sufficient.
"what's the user's ID?" 7.
"what's the user's password?" 7.
"do the provided username and password match?" 7.