Start migrating away from password-based authentication
Finish migrating to the new authentication scheme, under HTTP API v0