Do not show password, during login, on an insecure channel (without SSL). Use a SHA-256 hash algorithm.
(8)
...will receive a verification email once you submit this form. The email subscription will be activated once you respond to the verification email.