updated encryption

- only username of email gets encrypted
- encryption is optional (new checkbox in settings page under 'Other Settings'
- data gets decrypted on grade sync (username is the only dencrypted value here)