Add option to hijack via username or email

I've implemented to other options, so now you can login via `hijack/email` or `hijack/username`. Also I've maintained compatibility.