Actually it's entirely possible that a site where one signs in could have many members with the same password by chance. So how is the sign in system supposed to know who's trying to sign in without the correct user name and password. Also if they didn't require both, user accounts wouldn't be as secure.
