hardcoding default root pw for testing