fixed config validation to allow blank database passwordC