change cms login pw to .env