prioritizing email and password params for login if supplied
preventing override from causing loop when incorrect