allow sign in by username and email