This is only a suggestion but could you make the link an ASP request that retreives their current login name or password. If they use when not logged into the site it could not retrieve this...