Updated API to reflect the new ways of authentication.
- along with other minor updates.
GET /user/login shall return 400 when either or both username/password is not specified.