I have just bought you login script and playing with it. I found something that seems not consistent with the role of ADMIN.
As ADMIN I am able to add users and activate them. This is very good. However if try to activate a user that has signed up and has not received the email (so he is still "Deactive") after clicking "Update User" the script say "password does not match". Of course I cannot know the password set by the user. In this case I cannot never update his status and even edit him!
I think that ADMIN should be the right to edit unconditionally the user data without to know his password.
I would like to know if this is a feature or I have done something wrong.