cryptsetup: check that password is not null

Beef up the assert to protect against passing null to strlen.

Found with scan-build.