The build script to set the server ports and the like copies across the "standard" crowd.properties, overwrites the existing one and modifies the values.

This will cause the old password to be lost and thus reset to "password".

Current workaround is to backup crowd.properties and transfer the password into the crowd.properties generated by the script.