add default user creds
restrict access to directory
add simple setup script