login works with username or email