Updated authenticate to block empty password. For some reason Active Directory is not throwing an exception if the password is missing so you can authenticate without one