Password check should be wrapped in isset