- Set random username when they come through oauth - do not set their real name initially - make them a bot user initially - can hit them with the human validator later then ask if they want to change username/add real name etc