ShellExecute, horrible idea. Too resourceful and too limited. Use CreateProcess instead, allowing you to place command line arguments.
Also, this is wrong.
scanf("%s",&username);
printf("You pass:\n");
scanf("%s",&password);
You don't need the reference of username, and password since both...