Credential-based login is still accesible but unusable

[BenjaminStuermer]

Although our users do not have username/password credentials to log in, it's still possible to be prompted for credentials under some circumstances. For example, attempting to reply to a thread while not logged in redirects to the login page.

Where possible, such links should be rewritten so that they log the user in via browserid. If there are situations where it's not possible to keep the user from seeing the login page, it should be changed to explain to the user that they should just click the "login" button instead of prompting them for credentials.