It was not clear from your original posts that you were dealing with 2 separate applications.
What are you using for password/username encryption? Can you post the code you are using?
Generally, you don't need to UrlDecode values that come across on the querystring.
-Peter
compiledthoughts.com