YES: Username and password. Users often re-use passwords. Treat their passwords for your throwaway application as if they were the key to your users' banking

YES: Username and password. Users often re-use passwords. Treat their passwords for your throwaway application as if they were the key to your users' banking data. (Because they may very well be!)