handle empty password in login form