do not use a root password for local dev