You might as well have them just log in with their email address in that case, which brings you back to the original "cruel username" problem.