auth - removed encryption, fixed display order

encryption should be handled by the framework (or at least the Auth provider) rather than  be manually performed by the user