I think what sites do is setup a .htaccess password file and that is what contorls the access and allows the site to email back the password. But I'm not really sure because I have not done it myself. Anyway I think it's worth looking into.

John