kickstart finish: root_pass may be nil

This commit fixes an issue, where `empty?` is called on root_pass which
has a nil value. This causes the template rendering to fail as `empty?`
is undefined for NilClass.