cannot have empty password