changed $username_or_email to $username in User Controller login()