login now uses email instead of username