Ok i will ask my programmer to fix it, look but we ont ask you to fill your email, also do secure password and save it, because if you forgot you can restore it only by me, fill you contact details also
3. You will probably enter the same or nearly the same password, so he will try to gain access here and takeover your account.
So, the story ends sadly.
This is working for every website, if you fill password which similar with your nickname you can be hacked not important you use http or https