requiring input in forms, especially with password

previously, an AD login with an empty password was possible!