The default username/password should be empty (to work on an "out of the box" system with no authentication, I would have thought.

It should NOT be checked in with any password that we would ever actually use