Don't include a usable default user in the config - enabling this user undermines switching security on in the first place.

We need a line in the file to demonstrate the format of a user but having a default working user with a password undermines the security we are enabling by default is guessing the password is simple.