title: ArangoDB password doesn't seem to do anything
body: <p>I'm testing out ArangoDB for a project.</p>
  
  <p>I've installed ArangoDB through homebrew and I'm able to run it fine without any problem, it's pretty good actually.</p>
  
  <p>I've got a small concern about security that I'm trying to address.</p>
  
  <p>When I create a new database (I'm using the Web Interface) i'm asked for the db name, and a username &amp; password.</p>
  
  <p>It doesn't seem to matter what I put in the username and password, i'm always able to login to it without any prompting for password.</p>
  
  <p>For example, i've created a database with the default user root and some random password and I can login to fine with arangosh, no questions asked.</p>
  
  <pre><code>arangosh --server.database test1
  
                                         _     
    __ _ _ __ __ _ _ __   __ _  ___  ___| |__  
   / _` | '__/ _` | '_ \ / _` |/ _ \/ __| '_ \ 
  | (_| | | | (_| | | | | (_| | (_) \__ \ | | |
   \__,_|_|  \__,_|_| |_|\__, |\___/|___/_| |_|
                         |___/                 
  
  arangosh (ArangoDB 2.7.1 [darwin] 64bit, using ICU 54.1, V8 4.3.61, OpenSSL 1.0.2d 9 Jul 2015)
  Copyright (c) ArangoDB GmbH
  
  Pretty printing values.
  Connected to ArangoDB 'tcp://127.0.0.1:8529' version: 2.7.1 [standalone], database: 'test1', username: 'root'
  </code></pre>
  
  <p>I've tried to create another database with a different user and password (bob was the user) and it still doesn't make any difference (and still logs in as root):</p>
  
  <pre><code>arangosh --server.database test2
  
                                         _     
    __ _ _ __ __ _ _ __   __ _  ___  ___| |__  
   / _` | '__/ _` | '_ \ / _` |/ _ \/ __| '_ \ 
  | (_| | | | (_| | | | | (_| | (_) \__ \ | | |
   \__,_|_|  \__,_|_| |_|\__, |\___/|___/_| |_|
                         |___/                 
  
  arangosh (ArangoDB 2.7.1 [darwin] 64bit, using ICU 54.1, V8 4.3.61, OpenSSL 1.0.2d 9 Jul 2015)
  Copyright (c) ArangoDB GmbH
  
  Pretty printing values.
  Connected to ArangoDB 'tcp://127.0.0.1:8529' version: 2.7.1 [standalone], database: 'test2', username: 'root'
  </code></pre>
  
  <p>In both cases I can do anything I want, create collections, add documents, etc.</p>
  
  <p>Why is the credential system seemingly not doing what it should? (protecting the system).</p>
  
  <p>I'm using the default <code>homebrew</code> installation version on OS X.</p>
  
  <p>I am not root (as in system root), but I am the user manually starting the DB instance from Terminal – so maybe in that regard I am the internal DB root (the user who starts the system) but that's just a wild guess.</p>
  
  <p>Am I missing anything?</p>