don't hash password when left empty