allow authentication by email

I'm opening this up for discussion.  Don't merge in yet.

Email is not unique by default, but we could throw that into fix_user if needed.