Updated the password for the admin user so that it will not be displayed in the code.
Updated security so that the jsessionId does not display on the login page url.