Don't want the passwords to be TOO strong, now do we? wink! wink!
Also, it would be BETTER if people used two-factor authentication, maybe forcing the use of text messages to cell phones, so that they must use something they know and something they have. I wonder... if, maybe, we forced our users to select absurd, unnatural passwords they'll have no hope of remembering, and then maybe they'll have to call or text or e-mail for help almost every single time? wink! wink!
Needs something that resolves case-sensitivity in usernames.
For example, because I've chosen "case_sensitive" as my user name, no one else may choose "Case_Sensitive" or "CaSe_SeNsItIvE" et c. Meanwhile, a request for "Case_sensitive" will fail.
It would be possible to fix this by crawling and scraping an enumeration of all valid user names into a lookup table, and then matching a query tranformed to all uppercase (or all lowercase) letters against the similarly transformed lookup table which retains the valid case sensitive version, then showing the results with the corrected name.