fixing webui and exposing webui
making secret the password