keep blank passwords from wiping out values