Password module shouldn't read from database with undefined user argument