replaced `login` with `username` for Cake 3

As per cakephp/cakephp#4861