Remove hidden fields from authentication key matching

This matching of login_keys up with authentication credentials introduced a bug where it would error if the institution had login_keys with display_flag=false. These are not fields that should be shown on a front end and need to be removed from the key lookup.