Change auth to on by default
Cleanup user serialization format a bit
Merge pull request #3519 from jakewins/2.2-authon

Auth on by default