Provide a little convenience around usernames during authentication.

[longrunningprocess]

If a consumer provides abc@example.org but the associated username for that user is just abc, go ahead authenticate successfully.