Right now empty strings are rejected as passwords. For testing purposes, we might want to allow empty passwords