allow hackers to log in with username, and show username instead of e-mail in tickets