Please for god sake hash our passwords!!! 

With a strong salt/pepper, please!

It is really brazenly to see my password unhashed in the url for the confirmation (in the email), so everyone could get this password!