Allow for empty HTTP passwords