obviously we won't set a default password, we'll randomize it