pwd login works with email or username too