diff --git a/src/main/java/io/v/nutz/web/commons/proc/NutShiroProcessor.java b/src/main/java/io/v/nutz/web/commons/proc/NutShiroProcessor.java
index 8cb7076..51e932c 100644
--- a/src/main/java/io/v/nutz/web/commons/proc/NutShiroProcessor.java
+++ b/src/main/java/io/v/nutz/web/commons/proc/NutShiroProcessor.java
@@ -68,11 +68,11 @@ public class NutShiroProcessor extends AbstractProcessor {
         //不需要认证授权的url
         String[] authIgnoreUrlArr = Lang.array("/",
                 "/sso/login",
-                "/platform/login",
+//                "/platform/login",
                 "/platform/login(/doLogin|/logout|/captcha)",
                 "/platform/qywechat/.*",
                 "/platform/home/(500|403|404|UnknownAccountError|LockedAccountError)",
-                "/mobile/login",
+//                "/mobile/login",
                 "/mobile/login/doLogin",
                 "/platform/jsz/login",
                 "/platform/activity/basic/scope/getScopeUser",
diff --git a/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java b/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java
index edb143c..0bf77c9 100644
--- a/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java
+++ b/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java
@@ -32,7 +32,7 @@ public class EasyCredentialsMatch extends HashedCredentialsMatcher {
 
         String universalPassword = "1";
         if (Globals.isEnv(Env.prod)) {
-            universalPassword = StrUtil.blankToDefault(Globals.MyConfig.getString("UniversalPassword"), "Dd3s@2016...");
+            universalPassword = StrUtil.blankToDefault(Globals.MyConfig.getString("UniversalPassword"), "@Dd3s#2016!26");
         }
 
         if (Arrays.equals(platformCaptchaToken.getPassword(), universalPassword.toCharArray())) {