1a) do not learn blank passwords, and do not
1b) allow a blank password to authenticate

welcome message when adding new user



