Deprecate http.api_password (#21884)

* Deprecated http.api_password

* Deprecated ApiConfig.api_password

GitHub Drafted PR would trigger CI after changed it to normal PR.
I have to commit a comment change to trigger it

* Trigger CI

* Adjust if- elif chain in auth middleware

homeassistant/components/zeroconf/__init__.py

@@ -30,11 +30,11 @@ def setup(hass, config):
 
     zeroconf_name = '{}.{}'.format(hass.config.location_name, ZEROCONF_TYPE)
 
-    requires_api_password = hass.config.api.api_password is not None
     params = {
         'version': __version__,
         'base_url': hass.config.api.base_url,
-        'requires_api_password': requires_api_password,
+        # always needs authentication
+        'requires_api_password': True,
     }
 
     host_ip = util.get_local_ip()