Whilst I understand and really like the non-tied in aspect of it, I'd probably implement some sort of facebook/twitter/google account authentication alongside of it.

Reason being is that, it too is just another authentication service that I'd rather users not have to make the effort to sign up for.