Quick tip: swap default passwords, secret keys and admin paths before new source code goes live