SERVER-8486 prevent empty dbnames in command params from crashing auth'd mongod

The crux of the issue is that we don't do command param checking until after
we've set up auth, but for certain commands we need their params to set up auth.
 This might be fixed/avoided if we had a more formalized structure for
sanitizing input to commands.
fill in assert code