Password config property should not default to empty string

Defaulting to empty string is error-prone, since deployers who misspell the password property name will get a weird error that doesn't point to the source of the problem.