check for empty password
add empty-password condition