Allow authentication with empty password and also no authentication at all