Don't allow empty passwords (you have to cancel if that's what you want).