The user should be checked on his login, not his email