[42] Allow blank passwords for users. Users without passwords cannot login, but can use google OAuth