initial setup - change access control to password