safety check for nil passwords
not nil? or empty? passwords tossed