use username instead of email, get rid of forgot password