You are creating the user with a plain text password, you'll need to do something more like this:

using System.Web.Security;

mojoMembershipProvider m = Membership.Provider as mojoMembershipProvider;
user.Password = m.EncodePassword(siteSettings, user, "user1234");

Hope that helps,

Joe

That line is setting the property on the user to a clear text password, nothing is saved in the db until you save it.

It will be saved exactly as it is set, it must be hashed or encrypted before saving it if using hashed or encrypted. By using the method I showed you it will always be encoded properly according to the password format, ie if using clear text it is not encoded by the method I showed you but if using hashed it will be hashed or if encrypted it will be encrypted. using the method I showed you is the only correct way to do it. Note that when using hashed or encrypted the password salt is also generated and set as a property on the user by the EncodePassword method that is why the user must be passed into the method.