ASp.net mEMBERSHIP use of isapproved, incorrect password accepted

 I am using ASp.net membership provdier to create user accounts, see markup for CUW

 <asp:CreateUserWizard runat="server" Id="createuserwizard1" MembershipProvider="SqlProvider"
    name="createuserwizard1" style="" oncreatinguser="Createuserwizard1_CreatingUser"
             OnCreatedUser="CreateUserWizard1_CreatedUser" TextBoxStyle-Width="150"
             emailregularexpression="^([\w-\.]+)@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.)|(([\w-]+\.)+))([a-zA-Z]{2,4}|[0-9]{1,3})(\]?)$"
             RequireEmail="true"
             CompleteSuccessTextStyle-ForeColor="Azure" Dis ...