Default to uv = 'discouraged` #21
Description
User verification should be set to discouraged by default. It should still be possible to set uv = 'required' with an option, but leaving it undefined can have unexpected side effects.