Install bcrypt.
Require user to have password.
Implement email as optional for users.
Require user email to be at least 5 characters.