allowing login with username or email address