have users user their emails to login ONLY
I think what's happening here is the account you can still log in with a username was created before you changed the two settings you mentioned.
Changing those settings doesn't update existing accounts. You'll need to modify those manually if you don't want usernames in them.
Does that make sense?
Let me know any questions.
Ross Fairbairn - Consulting
Hire me! Save time by getting our experts to help with your project.
Template changes, advanced features, full integration, whatever you
need. Whether you need one hour or fifty, get it done fast with
Priority Consulting: http://www.interactivetools.com/consulting/