empty password isn't passed