fix DB creation with passphrase

also, always finish WelcomeActivity so user can't back into it
fix empty password handling