fixed default credentials