If the user has logged in via Github / Twitter, I don't know what he can have here. If the user is logged via traditional email/password, I think we can have: - Username (change username) - Password - Avatar - Url (for a blog, twitter handle, whatever)