Here is the setup.
I have a website that has users and a login page.
I have also created the same users in yaf.

When logging into main website I want to also be logged into yaf.
My plan was to call login page and pass an XML doc or query string.
That worked fine other than whatever happens in the form login click behind the scences is what really logs them in.
My current solution is to add a iframe to my login page with the iframe bringing up yaf login page and logging them in.

Please tell me there is a better way to do this
Also register is encrypting passwords is there a option to turn that off?