Fix a bug in auth. Empty string evaluated to true.