deal with null passwords