Allow empty-password authorization header

Including Authorization header if an empty password (not undefined) is specified to handle the case where an api key is passed via username but no password is required (for example, asana.com)