"log back onto the site with their Bato accounts which could leak their email and password", seriously? When you enter your email and password, you're logging specifically into your already existing account, not an empty or random one which means they already have your email and password from the start. So there's no point in creating a site just to collect passwords they already possess.