permit root login in defaults