Decode entities in passwords (see #6252)
Add the missing user deprecated error code  (see #6105)