$username_or_email = sanitize_text_field($_POST['username']);
$password = sanitize_text_field($_POST['password']);

$credentials = array(
    'user_login'    => $username_or_email,
    'user_password' => $password,
    'remember'      => true,
);


$authenticated_user = wp_signon($credentials, false);