The embedded user object for authentication responses should use login i...

...nstead of username to match Users API