i found my problem. in my registration form i was encrypting the password by md5 and in my login form i was making sure it was sha1
one last question, i have a table called ID and all of the new registered users go to 0 by default. Is this something i should look into or it isn't really necessary? cause i know the ID is for the sessions, but should all be 0?