Valid point - from our perspective we though it would actually make things easier. We use the approved PayPal transaction to then generate a user ID for the person (using their PayPal e-mail address). So you can't just login with your PayPal e-mail address off the bat - but you bring up a valid point, people might think we're trying to phish for their paypal e-mail/password combo and enter it into our username/password fields...thanks for the comment!