add empty_password for user statement