setup accepts default password from environment