Curious, doesn't Facebook require you to verify your email when creating the account? How can she have signed up with your email and have it actively used without the use of that authorization email? There's a reason they send those out, for this specific situation. I call bullstuff.