allow empty credentials and db