doco wip + remove temp password after migrate