fix dealing with empty passwords

Empty passwords ("") are passed to mysql_password("") which results in
hash: *BE1BDEC0AA74B4DCB079943E70528096CCA985F8

Expected value for password is NULL