Allow staff with numeric usernames to be authenticated

If a staff's username contains only numbers, it may be misunderstood as internal ID. While this quick fix allows users with numeric usernames to login, there may be a case where internal ID of one staff is username of other staff. Staff::load should accept another variable stating if var is internal ID or username or email.