Figure out a better way to differentiate between regular (email) and other authentications

[begedin]

At the moment, we indicate we're using a facebook authentication by setting the username parameter to facebook. This is far from ideal. At the very least, there should probably be a flag of some sort, or, we should differentiate by parameter names in some way.