removing obvious default passsword