Requirements, design decisions and tasks for the Keycloak login, written after the implementation; mobile login and turning off legacy userKey login remain open.
