[app][xs]: tweak password (needs to move to config).