the root password should be empty for real, like before