password_hash & salt with facebook authentication

Development
4

I am not following.

It doesn’t matter at all. You don’t have chance to set password when using an OAuth services if they provide username and email.

The user can use their setting page to reset their password.