* Don't allow the browser to autocomplete usernames (assuming it cooperates)
* Allow multiple users with NO username