OT: You may want to validate email addresses too during signup (not only password) - this will ensure that visitors can't leave the email field blank by mistake (and will avoid serving them your error page).

Great article btw.