fix: use allow_nil because of empty password problem