> the concept of the username/password is still so prevalent

How can you improve on it? You have the identity part and the auth part. What is better than that?