Books online seems to say that both username and password must be supplied in order to run the sp_change_users_login procedure.
Is this correct or have I just answered another question really...
---------------------------------------------
If data can screw you, it will; never assume the data are correct.