Use pre-authentication for system users

Oak pre-authenticated login without repository involvement presents a number of advantages:

• it is faster since the repository is not involved
• allows mapping a single principal to the repositories of multiple service users, making ACLs easier to define in a fine-grained manner

We should therefore switch the starter to the pre-auth setup for service users.