This scenario occurs so many times (for almost every website) that I thought I would ask here:
What would be best indexing for a users table:
Edit: I think index on email-addresses and username may not be needed because it is set up with UNIQUE constraint and Oracle implicitly indexed unique constraint columns. I don't need to index hashed-password because as someone pointed out, that seldom occurs.
What other indexes then, if at all?