Fixed bypassing of authentication when no AUTH header is present (https://issues.jboss.org/browse/JGRP-1661)