Remove require. It's already done.
Check if the PW is empty before decrypt

otherwise the internal API will fail
Update version
Headers in renderer is private.