db: empty passwords can be used now.