What
Currently, the UPS mysql user passwords (2 users) have hardcoded defaults.
https://github.com/aerogearcatalog/unifiedpush-apb/blob/e3f9b3e838b70ccd10fa16277d69e59fa11569ba/apb.yml#L26-L35
Rather than hardcoded defaults, they should be generated if left blank during provision from the catalog

Why
To avoid the user potentially not changing the passwords during provision, and thereby leaving their mysql with default credentials

How

• see how this is done in the metrics apb for the postgres password https://github.com/aerogearcatalog/metrics-apb/blob/06906d24c27340afd4e8d9a7dda48e7644d22c3d/roles/provision-metrics-apb/defaults/main.yml#L24