It doesn't look like you have specified anything in the "Find" record tab. That is what is used to find and restrict access based on the username and password fields. You need to edit the server behavior and map the username and password columns to find the values based on your form elements.