Fixed edge case which allowed login with empty password.

Ensure skipping call to FormAuthenticate::_checkFields() does not allow
logging in with empty password. Closes #2441.