Password field should allow NULL and default to empty string