require non-empty root password in the 1st stage

configuring later is not possible, the 2nd stage has been removed