security: deny login via empty password
Merge branch 'hotfix'

* hotfix:
  security: deny login via empty password