enable security & add password for 'user' as 'admin'