. . . "hack around the validation by designating some field other than the email address our USERNAME_FIELD actually seems like not a hack, but the right approach." .