I think top priority should be the email notification to new users. There is no reason why an email isn't sent and is a glaring omission in my mind. Especially if the password has been randomly generated or reset.
Points 2 and 3 would be nice to haves in my opinion. Number 1 is essential!