check if password is set