Update Spec to require non-empty passwords