Change Profile Link and Login Behavior

[MRyno]

We currently have an issue with how the out of the box login and profile link work. Ideally, we'd like to log in with an e-mail address which is perfect because that is out of box. The problem is that we'd like the user profile URL to not contain the e-mail address like it does out of box. We'd also like the ability to let a user change their login e-mail address. Currently it seems the login email address is not actually something that can change (even though you can change it on your profile).

Our main concern is getting the email out of a user's profile URL while still signing in with an e-mail address.

[MRyno]

We are experimenting with making the authorizableId and principalName the "username" and keeping the e-mail on the profile. Then, we'd maybe need to create some kind of custom auth handler that will translate the e-mail address to a username and log in. We made a servlet that will do just that and use the http auth endopoint (/j_security_check) but obviously the token/cookie doesn't make its way back to the client's browser. I saw something about maybe extending the authorization helper maybe? That seemed more like for external things rather than within AEM, though.