I remember hitting this statement with a NULL password somehow, if the pwd is null, `bcrypt.compare` crashed NodeBB.. but now that I look at it again, I think that was caused by a bug that I introduced then fix with the last commit.

I'll take that out