add caution for unchanged default admin password