usereg password may be different with the login one