update auth to allow email based login