adminAuth fix
move default admin password to config