>You can get the best of both worlds by making it so that your user (has to?) also set a password when they finish logging in via facebook the first time. Then

>You can get the best of both worlds by making it so that your user (has to?) also set a password when they finish logging in via facebook the first time. Then why are they bothering to sign in with facebook at all? It is now a more involved process than simply signing up with email/password, which is what facebook logins are supposed to be for avoiding.