Only include :password in Basic Auth if it's defined (fixes #602)