Closes #43 (empty passwords in HTTP Basic Auth)