When authentifying user-supplied email or nickname, use two SQL queries rather than a single boolean OR query, for the latter one doesn't make use of indexes. This speeds up the authentication for large sites considerably, e.g. about three orders of magnitude for the CERN site.