[api] avoid hardcoded email adresses in OBS code
[webui] Don't use Configuration.first UnregisteredUser