That's an option. Though asking users for their username/pass will cause significant overhead on my part in terms of security as well as turn away many of the users IMO.