adding check for default admin password to security manager
improved security in script extension, disabling rest api when default password has not been changed