Add option to hijack via username or email