you could make a password optional and just login from email. I will share this great innovation of mine: The location.hash is not send to the server. You can

you could make a password optional and just login from email. I will share this great innovation of mine: The location.hash is not send to the server. You can javascript it into a POST rather than a GET.