Separate optionality and validity of password