hs: Make /login accept full user IDs or just local parts. webclient: Only enable Register button when both password fields match.