I don't recommend doing this, it will open up a large can of worms. it is really not worth the potential trouble.
it can be done by editing the authenticate user server behavior on the Database tab, it will have the comparisons for the user name and the password. remove the username comparison.