You require a google or fb account to signup, kinda defeats the purpose?
I don't like handling passwords and it complicates the signup/login process which is why I don't usually implement password auth for small projects, but in this case I should probably consider it.