fix empty_password for user statement