username should have been email, escaped my checking