As Max Erickson says, they need their own OSM account. You can write your own editor, which submits changes to the OSM API. Users can authorise your editor to edit in their name via OAuth. Once someone has auth'ed your app, they can stay entirely within your app.
But be careful that you don't lead your editors to think this isn't a global database that others use, or other OSMers will be annoyed.,