Handle blank password in basic auth.

Fixes #681.