expose admin user and password