Why not just use username/password? It sucks in well-known ways and quantities, and usually less than the alternatives. Just be sure to store the passwords pro

Why not just use username/password? It sucks in well-known ways and quantities, and usually less than the alternatives. Just be sure to store the passwords properly (bcrypt or somesuch).