Подскажите в чем проблема данного кода?

function identification(username, password) {
        let xhr = new XMLHttpRequest();
        xhr.open('GET', 'https://example.com/api/user/authenticate?username=' + username +
           '&password=' + password, true);
        xhr.responseType = 'json';
        xhr.send();
        const result = false;

        xhr.onload = function () {
          if (xhr.status !== '200') {
            result = xhr.response;
          } else {
            result = true;
          }
        };

        return result;
      }




      $('form #login').click(function () {
        var username = $('username');
        var password = $('password');
        var res = identification(username, password);
        if (res == true) {
          document.location.href = '/home';
        } else {
          console.log(res.error);
        }
      });