fixed bug that allowed null password to be sent to server.