well they use the client program to register thier info and it gets added into the server then if there username and password is the same as whats been added to the server then they can log in...does that make sense? lol