disallow blank username/password