How to identify user with no password?