The glaring privacy issues tied to an online health and beauty retailer allows customers to log-in to their users accounts with just their email address – no password needed.