Allow empty password auth header with test.

Added test from #98 for PR #122