william usually signs his posts, doesn't he? could be another of the lurkers...
anyway, to be safe, try to log into marriott.com. if that requires a password change, do it. like you, I'm *very* suspicious of links in emails--as stated above, best course of action is not to log into sites you get to through an email link.