2 ms·

email as login plus emailing him for verification captcha against automation for the spam and if thats too annoying to implement use browserid.org