mmh, now how hard is it to click a link in an email, and then copypaste a 10-char token and your email address to 2 fields on a webpage...