http auth default password set to random
Merge branch 'next' into nextupdate