On not using the username for lookup, will put this in as a bug.

Will put a higher priority on not emailing the password as we had several people mention this.

Sunny