There are a couple of Authentication providers one is the "File Authentication Provider" which is a simple file based authentication. This particular one does not employ encryption. It's designed for demo sites. I would suggest using another authentication provider. The setup is simple, you create 2 files in the reports/ directory,
...