A good start would be to have the user's identity to be managed by the browser (with something like browserID). The rest could just be extensions, for those who care.