Ooh, I just got another idea but its a long shot since I should be handling this correctly but it is untested. This is pretty personal but do you have any non-alphanumerics in your username or password?