added default password on UserSettings