authentication by email or username and password verification