With CB installed, a user seems to be able to create a user name and password that is contrary to the pre-defined requirements (eg. no spaces in user name and a combination of upper and lower case in the password), yet the registration process proceeds as you would expect and doesn't pick this up. Is there any way to validate these at entry?