Allow empty passwords if not provided