User Model Improvements

Validate next parameters with a hmac, allow login with username or email address