password column needs to allow null otherwise Oracle will break for empty passwords