Sorry maybe I should be a bit more clear. The issue isn't the username, I can deal with that. All I'm trying to do is hunt down where in the login code their userid is being added to the session, which in turn makes them logged in. So until they do what they're told they're not going anywhere.