Be slightly more lenient on 'empty passwords': Allow empty password for 'users', but not for 'root'. Resolves #863.