add login functionality

in model: instead of email, ask for username; can't authenticate with
email