Warning about using the default password.

Change the default password, please :)
We could just let the user decide during the initial installation? And default to "wordpress" if they don't provide one (e.g. for local usage)