Use email only to login; changed username to display_name; store hashed password only