Consider deprecating old auth API

**Feature request**
It would be great to have sorting for types.

**Use case**
Many users need this functionality for production deployments.

**Implementation idea**
Add a new config option `enable_sorting` with default `false`.

No file, test, or entry point is named. First reconcile the title's old auth API with the body’s request for sorting types, then locate the configuration handling for `enable_sorting` and the relevant type-sorting behavior. Done should mean the intended sorting behavior is implemented with the option defaulting to `false`, but the issue needs clarification before work starts.

Written by the indexing model from the issue text.