adding login using username or email, password uses sha-256 digest