We don't want to make yet another password - so we use external services to authenticate. This way you only have to concentrate on keeping that service secure.