Since most of these seem to be about user accounts, I'll add: Don't require a user to have an account unless it's actually necessary for the feature.

Also, although I understand many folks have philosophical problems with this, you should support one-click log in with at least one of Facebook, Google, or Twitter. I almost certainly do not want to make a password for your site.