What is being discussed: - necessity of form tag: this is currently needed for migration-related functions. - separating credential-related features or settings - Distinguishing between calling a web page and calling a REST API