update to hide default password