Login now based on email

README.md

@@ -108,7 +108,7 @@ Every push to `main` also runs `.gitea/workflows/development.yml` and publishes
 
 Appending a username to the root URL, such as `/alice`, opens that user's public feed and profile information.
 
-Configuration APIs require a bearer token returned by the login endpoint. User configuration uses the identity in that token. Plugin administration additionally requires an administrator account; the development `alice` account is seeded as an administrator, while `bob` is a standard user.
+Configuration APIs require a bearer token returned by the login endpoint. Users authenticate with their email address; the username remains the public presentation identity used in profiles and feed URLs. User configuration uses the identity in that token. Plugin administration additionally requires an administrator account.
 
 Users can change their password from the profile page. The current password is required, new passwords must contain at least 8 characters, and the endpoint is `PUT /api/user/password`.
 
@@ -235,7 +235,7 @@ Login:
 ```sh
 curl -X POST http://localhost:8000/api/auth/login \\
   -H 'Content-Type: application/json' \\
-  -d '{"username":"alice","password":"secret123"}'
+  -d '{"email":"alice@example.com","password":"secret123"}'
 ```
 
 Submit a link using the returned access token: