The login route is now disabled by default. It was previously enabled by default. It is why it is a breaking change.
Linked to cubicweb/cubicweb#857 (closed)