try to handle null passwords where using an auth provider