We should prevent clients from creating accounts with an empty password.
We should prevent clients from creating accounts with an empty password.