Always log chosen security type

It's often useful to see if encryption was used, and how the user
authenticated (if at all).
Make sure we do an initial resize

The local window manager might give us a window of a different size
than the one we request. Make sure that the remote resize setting
gets respected even in this case.
Revert "Use VncAuth as the default security type, ..."

This reverts commit 39d7dc043afcf6f94b9c16942765fdb9a6a3202e.

We should be secure by default, even if it might cause a performance
hit. Those who wish to make that trade off are more likely to notice
the lack of performance than others noticing the lack of security.