Change http-default-accounts.nse from safe to intrusive as it attempts to login to the target.