PasswordDigest in Username profile

In order to make things harder for crackers, shouldn't the password be the
*first* thing hashed, not the last?
	/r$

--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html