Lucee admin page errors

in windows I’m running
lucee-5.4.3.2
CommandBox 5.9.1+00767
ColdBox CLI Version: 7.2.1+7
on my local pc. When I create a coldbox app and start the server I see the coldbox splash page but when I go to the Lucee admin {localhost} /lucee/admin/web.cfm I get an error
Lucee 5.4.3.2 Error (security)
Message Access is protected
Detail to access the configuration without a password, you need to change the access to [open] in the Server Administrator
Stacktrace The Error Occurred in
/admin/web.cfm: line 174
Java Stacktrace lucee.runtime.exp.SecurityException: Access is protected
at lucee.runtime.config.ConfigWebUtil.checkPassword(ConfigWebUtil.java:536)
at lucee.runtime.tag.Admin._doStartTag(Admin.java:625)
at lucee.runtime.tag.Admin.doStartTag(Admin.java:364)
at web_cfm$cf.call(/admin/web.cfm:174)

What I did in commandbox was

CommandBox:coldbox> mkdir testapp2 --cd
Created C:\coldbox\testapp2
C:\coldbox\testapp2
CommandBox:testapp2> install coldbox
√ | Installing package [forgebox:coldbox]
| √ | Installing package [forgebox:cbproxies@^1.0.1+13]
CommandBox:testapp2> coldbox create app testapp2

CommandBox:testapp2> dotenv populate --new
C:/coldbox/testapp2/.env created!
DB_DATABASE=coldbox
APPNAME=ColdBox
ENVIRONMENT=development
DB_USER=root
DB_HOST=127.0.0.1
JWT_SECRET=
DB_BUNDLEVERSION=8.0.30
DB_BUNDLENAME=com.mysql.cj
DB_PASSWORD=
DB_PORT=3306
S3_DOMAIN=amazonaws.com
S3_ACCESS_KEY=
S3_REGION=us-east-1
DB_DRIVER=MySQL
S3_SECRET_KEY=
DB_CONNECTIONSTRING=jdbc:mysql://127.0.0.1:3306/coldbox?useSSL=false&useUnicode=true&characterEncoding=UTF-8&serverTimezone=UTC&useLegacyDatetimeCode=true&allowPublicKeyRetrieval=true
DB_CLASS=com.mysql.jdbc.Driver

then I started the server and the commandbox splash page loads but I can’t get to any of the Lucee admin pages . I tried added password.txt to testapp2\lucee-5.4.3.2\WEB-INF\lucee-server\context and restarting the server and also rebooting my pc. Any idea as to what I’m doing wrong?