remove hard-coded development password