Probably going to use Sessions
User registration with stubbed 'forgot passord'