It would be a good idea to not send usernames and passwords to email addresses on sign-up.