Fixed #20593 -- Allow blank passwords in check_password() and set_password()