[FEATURE] Accept api key in username or password, deprecate admin@domain.com