http auth default password set to random