Password check should be wrapped with isset