email address password

(password just once once! – if it’s wrong they won’t be able to login after clicking on the activate code in the confirmation_email. but you’ll know it’s them since they have the confirmation code, so just reset the password on the fly if they botched it). They can pick a new username/displayname/nickname/realname/avatar/favoritesongs on there account page later.