add option to SSO to override username and email from sso payload