How to work login without the help of stored procedure?

<?xml version="1.0" encoding="utf-8" ?>
<Staff>
  <User>
    <username>aspxcode</username>
    <password>2008</password>
  </User>
    <User>
    <username>windows</username>
    <password>vista</password>
  </User>
</Staff>

protected void Login1_Authenticate(object sender, System.Web.UI.WebControls.AuthenticateEventArgs e)
{
	string username = null;
	string pwd = null;
	string CurrentUser = "";
	string CurrentPwd = "";
	bool LoginStatus = false;

	username = Login1.UserName;
	pwd = Login1.Password;

	XmlDocument xd = new XmlDocument();
	xd.Load(Server.MapPath("~/App_Data/AllUser.xml"));

	XmlNodeList xnl = xd.GetElementsByTagName("User");

	foreach (XmlNode xn in xnl) {
		XmlNodeList cxnl = xn.ChildNodes;
		foreach (XmlNode cxn in cxnl) {
			if (cxn.Name == "username") {
				if (cxn.InnerText == username) {
					CurrentUser = username;
				}
			}

			if (cxn.Name == "password") {
				if (cxn.InnerText == pwd) {
					CurrentPwd = pwd;
				}
			}
		}

		if ((!string.IsNullOrEmpty(CurrentUser)) & (!string.IsNullOrEmpty(CurrentPwd))) {
			LoginStatus = true;
		}
	}

	if (LoginStatus == true) {
		Session("UserAuthentication") = username;
		Session.Timeout = 1;

		Response.Redirect("how-to-StartPage.aspx");
	} else {
		Session("UserAuthentication") = "";
	}
}

public class UserToken
{
    private int UserID; //ContactID
    private string MagicString;
    private static Random Generator = new Random();
    private int MAX = (int) Math.Pow(2,16);

//if user returns or send request check if file still exists
//else show login screen...

private void GenerateMagicToken()
    {
        MagicString = string.Empty;
        int MagicInt = Generator.Next(MAX);
        MagicString = MagicInt.ToString();
        //write to file
        string path = Folder + UserID.ToString() +".token";
        if (File.Exists(path)) //prevent more than one token per user- ie Login only once!!!
        {
            throw new Exception("User is already Logged in!");
        }
        else
        {
            using (StreamWriter sw = File.CreateText(path))
            {
                sw.WriteLine(MagicString);
                
            }
        }
    }

}