[hvb2]

The way I read it, the password might not have been different for each new user...

But that's negated completely by the next part about there being a sign up without any email verification