don't include email in the list of valid logins as this isn't unique
Merge pull request #7 from dimagi/email-is-not-a-login

don't include email in the list of valid logins as this isn't unique