I am trying to create page, so the a user can register online and do a payment,

in the below code, the user is created, but the user id is set in name_security table, but the password still empty.

what am i missing?

IiMISUser user;
             CContact contact;

            try
            {
              
                if (Session["LoginUser"] != null)
                {
                    user = (CContactUser)Session["LoginUser"];
                    contact = new CContact(user, ((CContactUser)user).ContactId);
                }
                else
                {
                    user = CStaffUser.Login(ConfigurationManager.AppSettings["LoginKey"], ConfigurationManager.AppSettings["LoginPW"]);
                    user.ThrowExceptionOnError = true;
                    contact = new CContact(user);
                    contact.CustomerTypeCode = "MEMB";
                }

                contact.FirstName = "John";
                contact.MiddleName = "c";
                contact.LastName = "Smith";
                contact.Designation = "?";
                contact.InstituteName = "SMi";
                contact.Title = "Mr";
                contact.EmailAddress = "john@smt.com";
                contact.WorkPhone = "04213542321";
                contact.HomePhone = "09";
                contact.InstituteName = "klaysoft";
                contact.DefaultAddress.Address1 = "fg dfg";
                contact.DefaultAddress.Address2 = "g g";
                contact.DefaultAddress.Address3 = "f g";
                contact.DefaultAddress.City = "fgfgs";
                contact.DefaultAddress.StateProvince = "fsgfg";
                contact.DefaultAddress.PostalCode = "3025";
                contact.SetContactId("john11");.
                if (contact.Validate())
                {
                    contact.Save();
                }
                else
                {
                    throw new Exception(contact.Errors.PrimaryErrorMessage);
                }

                contact.CreateUserSecurity("john", "xdsds443");
                contact.UserSecurity.ChangePassword("xdsds443","dsdsdsdsdsd");

                if (contact.Validate())
                {
                    contact.Save();
                }
                else
                {
                    throw new Exception(contact.Errors.PrimaryErrorMessage);
                }

         
            }
                catch(Exception d)
            {
                }
        }

thanks