allow for not setting a password