change cms username and password, don't block site routes, only route via /blog