I'll look at allowing more prior to login, as a few others said, its a huge weak point for my site.
Thanks for the input, going to look into OpenId now ;)