Default password encoder should be ATLASSIAN-SECURITY

Password encoders are now shown in an essentially random order (due to CWD-3543?). They should be in alphabetical order and ATLASSIAN-SECURITY should be the default without relying on ordering.