Basic user management/authentication

[davidsharff]

Here's my take on the minimum requirements:

• Account creation (username + password)
• Login screen
• Password reset (maybe not at first if we don't get it out of the box from a 3rd party service)

Is it preferred that we start with an open door model? Or would an invite-only or some other approach be more desirable at first?