do not have to confirm passowrd if none were created