dissallowed changing password to be blank