security assist allows you to elect the username column from your database table.
you can set it up to use the email address column as the username, or any other column in your users table.
security assist does not force any password complexity, but you can use the server validation of Form Toolkit to force password complexity on the registration page if you like.