Hashed, salted. The email address isn't checked, so if you really don't want to give it out, put in garbage with an '@'.

http://github.com/technoweenie/restful-authentication/tree/m...