Hey,
I noticed that you always send the passwords to users via email. This is not such a great idea, because emails are unencrypted and can easily be intercepted by everyone on the way. Therefore, I would suggest you refrain from sending any passwords via email.
Even though your CantoneseClass account might not be the most interesting thing for hackers or the government, it is just creating an unnecessary risk.
