remove unused import from auth
use sha256 instead of sha512
add email, username lookup