Use hash_username and password. Admin/staff can use username.
Hash username / admin login: Use hash_username. Admin/staff can also use regular username.
Password: