I have to ask... Why the hell do folks roll their own implementations for this type of thing! If you are not a security expert, etc. don't f'n make an account system yourself. You should be able to ...