Creating secure user login for application that will be open source

[jmcilhinney]

Simply don't use a database.
...
You can use application settings and Textfiles instead.

Really? Because XML config files and text files offer better security than a database? I think not.