hosting: implement default db password