Only authenticate users with empty passwords