User can recover password with email or username