The ordering of the code issue is only a problem when applying server behaviors individually. Since you apply them one at a time, Dreamweaver doesn't know the correct order you intend. A larger wizard doesn't have that problem because we are able to apply all the server behaviors at once in the correct order instead of asking Dreamweaver to figure out the order when applying them individually.
You secure the pages with the new MySQLi "Restrict Access to Page" server behavior just like you would with the old Dreamweaver version.