I guess with WSA the same procedure as for lost ESA passwords should work: Open a support case with Cisco. They'll send you a passwort for the "adminpassword" user. After logging in with this user you will be prompted to enter a new passwort for the "admin" user.