Hacker News Reader

I have a system where users log in extremely infrequently. Tempting to move away from username & password because they just reset every time anyway.

Yeah - that's my thought too, the service I use them for is not something people often log into. Sometimes never.