Avoid creating dummy accounts sign-ups.

Handle Sign up with a "send signup email". Upon Sign up (with email only) send a sign up link that opens a page to define the password.