two problems: the emails and passwords being processed weren't being appended to the proper list so no email notifications were being sent, and the wrong variable was being used for the login in the email so each person was sent the login name for the last user in the CSV file