Username and email both work for login