Create a token (cookie) on the client. Tie that to an automatically created account. Give the user the option to register credentials for the token. Now it's on

Create a token (cookie) on the client. Tie that to an automatically created account. Give the user the option to register credentials for the token. Now it's on the user to decide to register before their cache gets cleared (warn them of course).