root account can have password blank if password used

same as 5.5 PR