allow for null password in configs