Allow calling setAuth() with a blank password. Closes #239

This supports APIs such as Stripe which only require a username to authenticate.