Disable username/pw login when ENABLE_LEGACY_LOGIN is false

[AlexCLeduc]

We still need to properly disable the POST endpoint on the login view and the admin/login/ as well

Just did this for cedars, not complicated:

• write a custom admin config and site, override login method
• override post method of login view and bail if ENABLE_LEGACY_LOGIN