You forgot the s in members
if ($password == "***" AND in_array("$username", $members))
You may want to striplashes on the posted info, although this is likely not relevent, also I would write the above as:
if ($password == "***" && in_array($username, $members))
but not sure if that is any better coding practice either.