changes for issue #65

* default the secure option to on for all new registrations
* change it to on for every user on change of preferences
* note in prefs that it is a deprecated option