add missing check for unencrypted passwords