don't show password strength if there's no password