So, because you are using form data, you need to set the "file upload" option on the HTTP In node.
Here is a working example...
[{"id":"2b7dfa6bd2f6c71b","type":"template","z":"7eecf5f1d763605a","name":"","field":"payload","fieldType":"msg","format":"handlebars","syntax":"mustache","template":"<html> \n <head>\n </head>\n <body>\n <form action=\"/msprocess_login\" method=\"POST\">\n <label for=\"username\">Login</label>\n <input name=\"username\" type=\"text\" />\n <br />\n <label for=\"password\">Password</label>\n <input name=\"password\" type=\"password\" />\n <br />\n <input type=\"submit\" />\n </form>\n </body>\n</html> ","output":"str","x":1508,"y":64,"wires":[["e435327fb9c8b2ce"]]},{"id":"ca3084dfe4d33051","type":"http response","z":"7eecf5f1d763605a","name":"","statusCode":"200","headers":{},"x":2188,"y":80,"wires":[]},{"id":"d602177b36ede011","type":"http in","z":"7eecf5f1d763605a","name":"","url":"/mslogin","method":"get","upload":false,"swaggerDoc":"","x":1322,"y":64,"wires":[["2b7dfa6bd2f6c71b"]]},{"id":"e435327fb9c8b2ce","type":"http response","z":"7eecf5f1d763605a","name":"","statusCode":"","headers":{},"x":1650,"y":64,"wires":[]},{"id":"f634ee2176caee6f","type":"http in","z":"7eecf5f1d763605a","name":"","url":"/msprocess_login","method":"post","upload":true,"swaggerDoc":"","x":1380,"y":160,"wires":[["8bb8e3f5e79ea62d","37d04cc256c5330a"]]},{"id":"5f492585b0e0b787","type":"debug","z":"7eecf5f1d763605a","name":"query","active":true,"tosidebar":true,"console":false,"tostatus":true,"complete":"topic","targetType":"msg","statusVal":"topic","statusType":"auto","x":1762,"y":112,"wires":[]},{"id":"943ff9262e50ac79","type":"switch","z":"7eecf5f1d763605a","name":"is authorized?","property":"payload[0].authorized","propertyType":"msg","rules":[{"t":"true"},{"t":"else"}],"checkall":"true","repair":false,"outputs":2,"x":1984,"y":160,"wires":[["a7e11d357d44e066","ca3084dfe4d33051"],["5613bc6e3ce46d86","27f84a1c88e8574b"]]},{"id":"a7e11d357d44e066","type":"debug","z":"7eecf5f1d763605a","name":"","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"false","statusVal":"","statusType":"auto","x":2202,"y":128,"wires":[]},{"id":"5613bc6e3ce46d86","type":"debug","z":"7eecf5f1d763605a","name":"","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"false","statusVal":"","statusType":"auto","x":2202,"y":192,"wires":[]},{"id":"8bb8e3f5e79ea62d","type":"debug","z":"7eecf5f1d763605a","name":"","active":true,"tosidebar":true,"console":false,"tostatus":false,"complete":"true","targetType":"full","statusVal":"","statusType":"auto","x":1426,"y":208,"wires":[]},{"id":"37d04cc256c5330a","type":"change","z":"7eecf5f1d763605a","name":"Set query","rules":[{"t":"set","p":"topic","pt":"msg","to":"select * from Users where username=:username and password=:password","tot":"str"}],"action":"","property":"","from":"","to":"","reg":false,"x":1588,"y":160,"wires":[["5f492585b0e0b787","cdbe2afb49f18417","2dc35737670e30b5"]]},{"id":"cdbe2afb49f18417","type":"debug","z":"7eecf5f1d763605a","name":"payload","active":true,"tosidebar":true,"console":false,"tostatus":true,"complete":"payload","targetType":"msg","statusVal":"payload","statusType":"auto","x":1772,"y":208,"wires":[]},{"id":"2dc35737670e30b5","type":"function","z":"7eecf5f1d763605a","name":"fake database","func":"const username = msg.payload.username;\nconst password = msg.payload.password;\n\nif (username == \"fred\" && password == \"wilma\") {\n msg.payload = [{\n username: username,\n authorized: true\n }]\n} else {\n msg.payload = [{\n username: username,\n authorized: false\n }]\n}\nreturn msg;","outputs":1,"noerr":0,"initialize":"","finalize":"","libs":[],"x":1792,"y":160,"wires":[["943ff9262e50ac79"]]},{"id":"27f84a1c88e8574b","type":"http response","z":"7eecf5f1d763605a","name":"","statusCode":"401","headers":{},"x":2196,"y":240,"wires":[]}]