password protection is now turned off by default