Fixed the master to drop authentication when non-leading.

Review: https://reviews.apache.org/r/16068