add-user script not always checking password in interactive mode

when the add-user script is run without command-line arguments and if the username triggers a warning, it allows the setting of any password without character restrictions