user can login with email or username