fixup! credentials: only take into account persons with reference when looking up login from email