.Value is nice to put there too, but the important place to put it is at the end of the SqlString variables you're passing in.
not
sqlparam(0).Value = User_UserName
sqlparam(1).Value = User_Password
but
sqlparam(0).Value = User_UserName.Value
sqlparam(1).Value = User_Password.Value