learned to allow both user and email as login, and modifying password length requirements