hardcoded dummy password