wtf you can have blank passwords