“I want users to sign up initially and subsequently login when they visit the site. I am gathering the absolute minimum of data - an email address and a user-generated password.”