check for None so an empty string is valid for a password