Access to that web page should be fairly lax, while admin should probably not be done by just anyone who knows the generic BWI password.