Improve the forms a bit. Add better error messages. Use the StatusMessage plugin. Add the RequestToken plugin for CSRF protection