Congratulations, you have just designed a leak that attackers can use to determine who has signed up to your website.