There are simple things, like the decision to not hide your password as you type it in (research shows less errors, higher satisfaction and no negative security consequences), but also methods to keep users logged in by default, reducing the need for bothersome logins.
