There should be a factory reset button on the back of the router, which would restore it to an unsecure network.
If he is accessing an unsecured network, I think he is in a grey area legally. If he has changed your wireless security to prevent you using your own equipment, I would be tempted to threaten him with legal action (after you have secured it).
Download the user guide for the router and set it to WPA encryption.