fixed ability to set empty password