no password as default