http intf: ensure the password is set