do not validate password if nil