should use password of current editing admin;