allow users to login with username or e-mail address