I guess I should mention that using jbpm-installer-3.3.GA bears very little resemblance to the 3.2 getting started documentation, pinned to the top of this forum.
I also suppose I should mention that I am using the new URL, I get the login screens, I just can't figure the passwords.
users are in the database. If you used the installer and stated to use another database then hsqldb, the database tables are empty. See wiki for an example sql script to populate them
Searching for "jbpm user" found something under DB2, about 40 entries down, which looks like it will do what I want.