fix(user): accept both email and id when login

fix(user): accept both email and id when login #9