authenticate with email as well as username