XiomaraCTF_Easy Login?

Hi this is my first write-up in English and I'm studying English hard for maybe 4 months

therefore, I would have many wrong sentences

anyway Let's see problem

this is start page, I thought it is sqli at first time but it was not

this is source page

first of all, I entered flag.css but I couldn't get anythings

so I entered main.js

	<!DOCTYPE html>
	<html>
	<head>
	<title>Login</title>
	</head>
	<script type="text/javascript" src="main.js"></script>
	<link rel="stylesheet" href="flag.css" />
	<body>
	<h1 align= "center">Login Portal</h1>
	<form name="login" method="POST" action="">

	<b>Username :<b> <input type="text" name ="username"/><br>
	<b> Password :<b> <input type="password" name="password" /></br></br>
	<input onclick="Login()" type="button" value="verify" name="button" />
	</form>
	</body>
	</html> then I got username and password
	`function Login(){ var username=document.login.username.value; var password=document.login.password.value; if (password == "53cure" && username=="@nokh@") { alert("Awesome!"); window.open("secureflag.html"); } else { alert("Oh swap!You are close. Why cant you try again?"); } }`