Fixed bug in @userpassword that still used old 'user' field to look up the password.