improved the security options

Best viewed with ```w=1``` option due to formatting changes (init.pp and config.pp have now identical formatting).

This should clear up the security config a bit and allow for multiple authentication methods.
I still need to test it so please do not merge.