allow login by user email or username