I am not even talking of oAuth yet, was looking at plain email/username - password combination.but yeah oAuth is a big factor too. How do I do a forget password if the email is going to end up in some dead land.