further improvement to error handling
updated default password