That's exactly what i said myself few days ago when i saw that article about facebook asking users' email password, until it was verified.