Fix issue with sending isPasswordSecure=false

- prior to fix, if password was sent empty and secure was marked false, a blank string would have been turned into a secure string (not empty)