Temp pass fix

* the temp password node apparently does not always come back
* calling #to_s on the nil returned from the response hash ensures that `#downcase` doesn't barf