added password defaults