[patches] firstboot - only set username/password in url if password is blank