modified sessions controller so that user can login with either email or login