Three stale references: "Enter username + password", Base64 encode "user:password", and SELECT WHERE username — all updated to email to match AppUserRepository.findByEmail() and CustomUserDetailsService. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>