Changing security-server tests to match no empty password string case.