ask for sending back the password by email
better protocol