when registering, additional user details should be asked for, such as email, first name, and last name.
on the Log In page the user should have the option to click a "Forgot my Password" button, which will send their email a link to allow them to enter a new password (overriding their previous password) for their account.