moving check for default admin password to security manager