modify admin login challenge, put password into HTML source code