OT: You may want to validate email addresses too during signup (not only password) - this will ensure that visitors can't leave the email field blank by mistake

OT: You may want to validate email addresses too during signup (not only password) - this will ensure that visitors can't leave the email field blank by mistake (and will avoid serving them your error page). Great article btw.