> If you're that worried about a user changing another user's password (which > would still require that user's password) then use a hook and create their > username from Auth::getAuth(). Using the hook is a good point... sorry i missed that. Thanks Amith