fix issue where NTLMv1 with extended session security would always authenticate with any password