I see it now. It would be a lot easier that way. And if the same password was used for both email and website, that would not be good for users.  They'd probably need their email to get a new password. That I/Hub is bad news.