don't ever set password to null or blank for Fortify audit