- [ ] Disallow emails as usernames - [ ] Add email authorization - [ ] Add reset password endpoint - [ ] Add social account authorization ?