Looks as though you are using Laravel? or something similar.
Try this instead:
$login = $user->login(Input::get('username'), 'password');
or perhaps you want:
$login = $user->login(Input::get('username'), Input::get('password'));
The login() function seems to be already doing the conversion to hash with Hash::make