don't pass in a nil password; fixes #8