Don't allow empty passwords.

Closes #255.