This needs an null argument check for `password`