why do websites still make you enter your email and password separately? like, can't they just see we're trying to log in here?