use empty user password per default