Yes, it requires login, but why do you think wouldn't comply with can-spam?  This [doc from the FTC](http://www.business.ftc.gov/documents/bus61-can-spam-act-compliance-guide-business) doesn't have anything specific like that.  Plus our course emails would fall under "transactional" emails, which would be **much** less stringently enforced than unsolicited commercial email.