Require a non-empty password before binding

Fixes #36