Hello Nick,
Thanks for the feedback. We have changed high priority users' pw. But there are over 100 users what we cannot change until they all are in the building. The old admin has been restricted from the building. In any case that is not an I.T. problem anymore. The security guards are aware that he is no longer allowed on the grounds.
Anyway, We have found a way to secure it by setting up basic auth on the original URL, then redirecting it to the new HAP+ URL.
Regards