Fixed small loophole.

A user was permitted to enter nothing as password before; no longer now.