shadow password fixes: empty fields should read as -1 not 0