All users have the ability to sign in using a username (only using email) and password

straight text checking for valid email in username