allow user to login with username or email