Check for null password or hash