When we come to OAuth, will users expect to be able to login with old username+password, and also OAuth? (e.g. what if their oauth provider was having technical difficulties?)