default password is blank