The email address, regardless of the password should be a unique field.
when running the Security Assist wizard to create the registration and login pages, go to the manage pages tab, and in the field settings section, se the email address column to be a unique database entry.