passwords created as default